last executing test programs: 1.553294781s ago: executing program 0: sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000006c0), 0x12) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000400)='FROZEN\x00', 0x7) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080)='THAWED\x00', 0x7) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r1, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x0, 0x1, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x50) syz_emit_ethernet(0x44e, &(0x7f0000002bc0)=ANY=[], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close_range(r2, 0xffffffffffffffff, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000005c0)={r3, &(0x7f0000000400), 0x0}, 0x20) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x202300, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_read_part_table(0x5c3, &(0x7f00000005c0)="$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") socket$packet(0x11, 0x2, 0x300) 1.455385676s ago: executing program 0: mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xfffffffffffffff8) dup2(0xffffffffffffffff, r0) 1.419547352s ago: executing program 0: unshare(0x42000000) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000008180)='./file0\x00', 0x398109c, &(0x7f0000000040)=ANY=[@ANYRESHEX=0x0], 0x1, 0x8150, &(0x7f0000018440)="$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") r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000340)='cgroup\x00'}, 0x30) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)) preadv(r5, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x45}], 0x2, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0xffffffbc) 1.380860858s ago: executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x2, &(0x7f0000000140)=[{0x35, 0x0, 0x0, 0x5}, {0x16}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{0x5, 0x8, 0x4}, {0x7fff, 0x0, 0x80, 0x4}, {0x4, 0x2f, 0x5, 0x2}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000500)={0x0}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x3e5084, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$SNAPSHOT_SET_SWAP_AREA(r4, 0x3309, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000180)={r1, 0xffffffff7fffffff, 0x80000001}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00'}, 0x90) ftruncate(0xffffffffffffffff, 0xc17a) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000580)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r5, 0x3, r0, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x24}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000016c0), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYRES16=r9, @ANYBLOB="010000000000000000004f0000000e0001006e657464657673696d0000000f02000000657464b8ba912160ecf69aff657673696d3000000800ab000000000008000b000000000006001100ffff0080"], 0x4c}}, 0x0) r10 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000380)={'gre0\x00'}) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000100)=0x3c0, 0x43) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000600)=ANY=[], 0x3000}], 0x1}, 0x0) 1.201283616s ago: executing program 2: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) getpid() getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000153828754c0001800d0001007564703a73797a310000000038000400200001000a00000000000000ff05000000000000000000000000000103000000140002000a00"/90], 0x60}}, 0x0) 1.17389947s ago: executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000440), 0x73, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x2041}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000080)={0x800041}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000140)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02102303080026006000000002000020d3"]) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="18007e2f0cc3703b7b16391715b1af988caf5606c6c40c00003114204acf3ce809aa83a08aa96514feb27ad1"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='ext4_sync_file_enter\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x1}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b80)={&(0x7f0000001a40)='ext4_sync_file_enter\x00'}, 0x10) openat$cgroup_ro(r4, &(0x7f00000004c0)='blkio.bfq.dequeue\x00', 0x100002, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000000), 0x10) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCPKT(r9, 0x5420, &(0x7f0000000040)=0x5) ioctl$TCSETS2(r9, 0x402c542b, &(0x7f0000000000)={0xfffffffe, 0x0, 0x0, 0x0, 0x0, "a75f26d40807055a191c6bd53c17f9350091f1"}) ioctl$TCSETS(r9, 0x5402, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "d1217bd3e6d05ea55713400f8278192faa68aa"}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000080000000000000000000a1400000010"], 0x28}}, 0x22000084) sendmsg$can_bcm(r8, &(0x7f00000005c0)={&(0x7f0000000180)={0x1d, r7}, 0x10, &(0x7f00000001c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="04000000000000000000010000000000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x38}, 0x2}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) recvfrom$l2tp6(r4, &(0x7f0000000300)=""/206, 0xce, 0x2022, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local}, 0x20) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="110000001c00010004000000000000001d010000c70febb2dad46d8292b435923fbe30fc5d27e1fb2ff7fd02daa6fbfe9c0dd040332772a551b36bd7428b5bf4a169fa9cf492ddbcd7026cf129b177e64bacc2d675c06220c048e9f9b3bfc39889852314a9696e17d31b3e142646a01666314a6416c82b0bf1dcf2e1c3c3297b5ab26e355956848e157db25fbfd9e07ed68342f356364a4701d2449437928c5c5700e0d21461b798cf044c13f73ae9f27c51299af68927be"], 0x14}}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x4) write(r11, &(0x7f0000005c00)="2700000012000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) write$binfmt_script(r11, &(0x7f0000000600)={'#! ', './file0', [{0x20, '!'}, {0x20, '\x10\x00\xe3\x00\x1dI\x9c\xcc\xd4\xd9\xa8\x1e\xdd\xf0_\x1a)\x1a\xac\xd8\x1b\x0f\x0020\xd8v#\xb3\xdc\x1e-\x97\a\xc28Z\x95\xa28\x92\xeb\xeb\x87\xb8\xb3\xa0\xf0\x18\xbcE$\x90u\xd0\x88D\x0f\\\x91\xaf\b\xf32\xf8\b\x80\xd99\tEE.\xd4u\xbfg\xb9\xab\x9b\x00]\xf9r-\x93<<=x\xb6\xb4\x7fmq\xcf\xfb\x94\x9b\xd4\xf3\x9fQ\xde\xf6\xb0\xc2\x89\x8b*\x9fJ\xea\nb]\xd2K$>\xac\x97*\xb3\x9ab\x7fG\xd0P\xd2\xfc\x82d\xb3\xc7\x01\x95\x1a\x11\xfd\xed\xa8zxU\x1eP~\xbb\xd0\xaf\xdf\xc4}?4\x96\xe8#`\xe8\x14S]\xc0p\x1f\x9c\xfb6k'}, {0x20, '!^\xb0,$%T)$\\'}, {0x20, ',!\xea!/'}, {0x20, '\x9f\x00\x00\x00\x00\x00\x01\x00\x18M9p\xcfBV\xfe\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00'}, {0x20, '-'}, {0x20, '[#:@'}], 0xa, "09eabc638ac7bf2639292d5167f08baae57bf09ae5ef4f42856100463dc038678aa681e2fae5c5b6b81ed466bff3a68ed22d"}, 0x122) 1.112523829s ago: executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00070c000000000000000007000000", @ANYRES32=r1, @ANYBLOB="40000f000a000200aaaaaaaaaa0c"], 0x28}}, 0x0) 951.943494ms ago: executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000005c0)={0x0, 0xffffffffffffff8f, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="3000000002030104000000000000000000000000080003401adb00000800010001000000090002000000000000000000"], 0x30}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x9, 0x5, &(0x7f0000000000)=ANY=[@ANYRES64=r0], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x2}, 0x90) r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pread64(r2, &(0x7f0000000580)=""/264, 0x108, 0x8003fffffffffa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='ext4_es_remove_extent\x00', r1}, 0x10) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x194}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x48}, {&(0x7f00000007c0)=""/154, 0x4c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x3, 0x8}, 0x48) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000a40)={0x15, 0x110, 0xfa00, {r6, 0x80000000, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x100, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x1}, @ib={0x1b, 0x9d1, 0x0, {"c409ccd9e20d6776a29e5d924e52c29c"}, 0x1, 0x810f, 0xffff}}}, 0x118) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000027c0)={{r4}, &(0x7f0000002740), &(0x7f0000000040)='%pS \x00'}, 0xb) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_es_remove_extent\x00', r7}, 0x10) unlink(&(0x7f0000000000)='./cgroup\x00') 905.564111ms ago: executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r1, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x3e8, 0x0, @empty}, 0x1c) 755.559454ms ago: executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./bus\x00', 0xa08886, &(0x7f0000000040)=ANY=[], 0x3, 0x2b9, &(0x7f0000000ac0)="$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") ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r2 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000300), 0x16) r4 = dup3(r3, r1, 0x0) sendfile(r3, r2, 0x0, 0x8038) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x23, &(0x7f0000000680)=ANY=[@ANYBLOB="180000003f000000000000000300000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000ffffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r4, @ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, &(0x7f0000000080), 0x41000, 0x46, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[r3, r1, r4, r3, r4], 0x0, 0x10, 0xfff}, 0x90) r6 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f00000000c0)={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, 0x2, 0x1ff, 0x0, 0x100, 0x5, 0x440000, r7}) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000080)={@loopback={0xfec0ffff00000000, 0xff02}, 0x0, r7}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={@local, 0x1f, r7}) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000180), 0xffffffffffffffff) getsockopt$inet6_mreq(r6, 0x29, 0x15, &(0x7f00000001c0)={@remote, 0x0}, &(0x7f0000000200)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r8, &(0x7f0000000340)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES64=r2, @ANYBLOB="000428bd5700fbdbdf259a00000008000100", @ANYBLOB="975e7eb36ef0838c1a3bb67a1c1406a21730e279a21fb9a7295b1817b7c28e9474005cc4f3462ae782dd73c4f239cc1d6c7e8fc08da88cb2fe2b243d29bfbe87741d10f4616520bb7457db976c1f5bdbae9897d51bd8a43ccb3fd2e670591a2f9e5100966e883596df2e6db6a31668d8b21b007e7d5890a6b7a625b57958586ebd23bb0ce5078adbd49f05c2e61e3548cacc3e5a501cd3c9f4", @ANYBLOB="8400029c33e350a99b812ee0c22167804000010024e900006c625f74785f6d617070696e67000000000000050051818d698103000300000008f504000000000000000000", @ANYRES32=r4, @ANYRESHEX=r9, @ANYRES32=r9, @ANYRESHEX=r2], 0xa0}, 0x1, 0x0, 0x0, 0x80}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r5, r7, 0x25, 0x3, @val=@perf_event={0x10001}}, 0x40) write(r1, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a5", 0x71) sendfile(r1, r2, 0x0, 0xef84) r10 = accept4$inet6(r4, &(0x7f0000000240)={0xa, 0x0, 0x0, @remote}, &(0x7f00000002c0)=0x1c, 0x80000) setsockopt$MRT6_ADD_MFC(r10, 0x29, 0xcc, &(0x7f00000008c0)={{0xa, 0x4e22, 0x200, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xfff}, {0xa, 0x4e20, 0x5543, @empty, 0xfffffffc}, 0x0, {[0x2, 0x4, 0x4, 0x4, 0xfff, 0x8, 0x80000000, 0x400]}}, 0x5c) 740.841817ms ago: executing program 3: perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') r0 = socket$inet6(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x300000000000c00, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x1}, 0x48) 695.487823ms ago: executing program 3: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) getpid() getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000153828754c0001800d0001007564703a73797a310000000038000400200001000a00000000000000ff05000000000000000000000000000103000000140002000a00"/90], 0x60}}, 0x0) 665.538878ms ago: executing program 3: perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x400) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x0, 0xfff, 0x7}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, r2}, 0x38) 617.350396ms ago: executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r0, &(0x7f0000000000)={0x2a, 0xffffffff80000004, 0x7fff}, 0xc) fsopen(0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./bus\x00', 0x14542, &(0x7f0000000240)=ANY=[], 0x1, 0x1222, &(0x7f0000001580)="$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") r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x48) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x1, 0xf830, 0x8001, 0x1ff, {{0x11, 0x4, 0x3, 0x3a, 0x44, 0x67, 0x0, 0x44, 0x4, 0x0, @private=0xa010101, @remote, {[@rr={0x7, 0x17, 0x69, [@multicast2, @private=0xa010101, @broadcast, @local, @multicast2]}, @lsrr={0x83, 0x17, 0x11, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000002c0)=ANY=[@ANYRESHEX=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x25, r1}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) ioctl$EXT4_IOC_GROUP_ADD(r1, 0xc0185879, &(0x7f0000000080)={0x0, 0x200002000001, 0x0, 0x0, 0x0, 0x0, 0x2401}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$setopts(0x4206, r4, 0x0, 0x0) ptrace$ARCH_SET_GS(0x4207, r4, 0x0, 0x1001) ptrace$ARCH_SET_GS(0x1e, r4, 0xfffffffffffffffd, 0x5002) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200)=0xf06, 0x12) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) bpf$BPF_PROG_QUERY(0x23, &(0x7f0000000380)={@cgroup, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x11) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x4, 0x0, 0x0, 0x0, 0x99, &(0x7f0000000180)=""/153}, 0x90) 547.210096ms ago: executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000b210f9000000007f"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x16, 0x0, 0x6, 0xfffffffa, 0x0, 0x1}, 0x48) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000c00), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x20001400) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='io.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1503"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x90) ioctl$TUNSETOFFLOAD(r2, 0x4010744d, 0x20000000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r1, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], 0x0, 0xf9, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000001c0), &(0x7f0000000280), 0x8, 0x15, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) close(r2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000100)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@block_validity}, {@grpjquota}]}, 0x3, 0x45b, &(0x7f00000010c0)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) tgkill(0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x144000, 0x7fe2, 0x1}, 0x48) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) shutdown(r4, 0x1) socket$inet(0x2, 0x80001, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x1b, &(0x7f0000000000), &(0x7f0000000080)=0x10) r5 = fcntl$dupfd(r3, 0x0, r3) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x17, 0x51, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 506.594262ms ago: executing program 1: perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x20400) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r0, 0x0, 0xc00, 0x0, 0x0) 494.605954ms ago: executing program 4: openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, &(0x7f0000000200)={0x503}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e999000000000000000000000000000000000000000000000000ac1414bb0000000000000000000000004e220000000000000a008080"], 0xb8}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x33, 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x18cc0, 0x0) socketpair(0x0, 0x20000000000001, 0x0, &(0x7f0000000100)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000000)={0x1900}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180), 0x5d) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr, @const]}}, 0x0, 0x32}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @typedef={0x0, 0x0, 0x0, 0x5}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000200000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) close(r5) close(r6) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 484.937476ms ago: executing program 3: mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(0xffffffffffffffff) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0xfffffffffffffff8) dup2(r0, 0xffffffffffffffff) 423.004475ms ago: executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vxcan1\x00', 0x0}) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r0}, 0x18) r1 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x4e40, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000540)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0}) io_uring_enter(r2, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0xd2, 0x0, 0xffffffffffffffff, 0x9, '\x00', r0, r1, 0x7, 0x1, 0x1}, 0x48) listen(0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp\x00') socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100677470001c00028008000600", @ANYRES32, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="0800030001"], 0x48}}, 0x0) 365.712754ms ago: executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{0x5, 0x8, 0x4}, {0x7fff, 0x0, 0x80, 0x4}, {0x4, 0x2f, 0x5, 0x2}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000500)={0x0}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x3e5084, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$SNAPSHOT_SET_SWAP_AREA(r4, 0x3309, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000180)={r1, 0xffffffff7fffffff, 0x80000001}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00'}, 0x90) ftruncate(0xffffffffffffffff, 0xc17a) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000580)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r5, 0x3, r0, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x24}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000016c0), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYBLOB="4c000000737c824f8edb3795572c5f010e67ca188ed62667a2d1ec63f653f48e61cabbf3ac428197142440a928f00160f87b9cd060cf38771b88209649c8ed0ddff832d0d99d7310115c178715be732c4db0bde8c75ef7ccdfb100fc50453738719c99eb9f1494b27eb95c82a8e151b6dd2ac0cada92f6675cf1743d44f45f0d44db362e79e9343007728efb156eab8b9ccbd5419843eae8285e7c387907fe847e5f2a23a6b27126aa3e755587d2", @ANYRES16=r9, @ANYBLOB="010000000000000000004f0000000e0001006e657464657673696d0000000f02000000657464b8ba912160ecf69aff657673696d3000000800ab000000000008000b000000000006001100ffff0080"], 0x4c}}, 0x0) r10 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000380)={'gre0\x00'}) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000100)=0x3c0, 0x43) 362.788445ms ago: executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100402020702500000df1467420207b1af8ffc5b6805a7b3706f6fbcd101dfbaf4900000000bfa100000000070000000000f8ffffffb7020000010000171d03b2834f741da3080c3d86646153bf5d5b1b4465e4f3e444608af797fdcd1e00038ab63efdfa86862ad07d748b11d9f96e801847a4ebe0566213ca2665b58b44a019d1b13a047a41e4cc2c08d7f92fae800a61bee0cc71fd7bea41058dbfcdf190d2ec884ca436d9fd88117ce590eb00"/202], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xa}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() syz_io_uring_setup(0x239, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, 0x0, &(0x7f0000000240)='GPL\x00', 0x1, 0xc3, &(0x7f0000000480)=""/195}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000003c0)={'bridge0\x00'}) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000080)='bridge0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='9p_protocol_dump\x00', r0}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001a0001000000000000000000022000000100000600000000161bc2685024ca417b0ad79dc9fa334af08145d0e38fc5867d3d66efed00220e868225a6be41940ed8449496ae39668f3632f606e45c"], 0x1c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000540)='ext4_da_write_pages\x00', r3}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 295.647635ms ago: executing program 4: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x208080, &(0x7f00000000c0), 0x1, 0x598, &(0x7f0000000800)="$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") perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0xffffffffffffff2e}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="020200030c00000000000000000000000100090000000000030006000000000002000000000000000000200000000200020001000000ff010000000b00000000030005000000000002000000ac1e000100000022efff0000010014"], 0x60}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x1c15e33101f29d, 0x0) 267.634329ms ago: executing program 0: socketpair(0x0, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0xb, 0x2, 0xffffffff) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000030400"/20, @ANYRES32=r1, @ANYBLOB="000070000c000280080001"], 0x38}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x14}, {0x1d}, {0x6}]}, 0x10) write(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0xb, 0x5, 0x0, 0x0, 0x0, 0x80000000000003, 0x11018, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x904}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) recvmmsg(r5, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40012180, 0x0) r6 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f00000006c0)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000180)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000002980)={0x5, {{0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, 0x1}, 0x90) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@mcast2, 0x20000, 0x6c}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x4000090) shutdown(r5, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x578, 0x3c0, 0x210, 0x3c0, 0x3c0, 0x0, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'veth1\x00', 'bond0\x00'}, 0x0, 0xa8, 0xf0, 0x0, {0x0, 0x3a010000}}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@broadcast, @ipv4=@remote, 0x3b, 0x11}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x210}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x0}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r10, 0x1, 0x13, &(0x7f0000000600), &(0x7f0000000640)=0x4) ioctl$TUNSETLINK(r8, 0x400454cd, 0x304) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="370c9a06f7ef"}) 190.743071ms ago: executing program 4: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) getpid() getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000153828754c0001800d0001007564703a73797a310000000038000400200001000a00000000000000ff05000000000000000000000000000103000000140002000a00"/90], 0x60}}, 0x0) 188.869632ms ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='block_plug\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='block_plug\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x40001) 133.789489ms ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) close(r0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000800000000000000000000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000080)={@map=r0, r1, 0x5, 0x0, 0x0, @link_id}, 0x20) syz_mount_image$ext4(&(0x7f0000000780)='ext3\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f00000000c0), 0x1, 0x782, &(0x7f00000017c0)="$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") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'dvmrp1\x00'}) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[], 0xfd14) fallocate(r2, 0x100000003, 0x81ff, 0x28120001) 67.54947ms ago: executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./bus\x00', 0xa08886, &(0x7f0000000040)=ANY=[], 0x3, 0x2b9, &(0x7f0000000ac0)="$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") ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r2 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000300), 0x16) r4 = dup3(r3, r1, 0x0) sendfile(r3, r2, 0x0, 0x8038) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x23, &(0x7f0000000680)=ANY=[@ANYBLOB="180000003f000000000000000300000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000ffffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r4, @ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, &(0x7f0000000080), 0x41000, 0x46, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[r3, r1, r4, r3, r4], 0x0, 0x10, 0xfff}, 0x90) r6 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f00000000c0)={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, 0x2, 0x1ff, 0x0, 0x100, 0x5, 0x440000, r7}) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000080)={@loopback={0xfec0ffff00000000, 0xff02}, 0x0, r7}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={@local, 0x1f, r7}) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000180), 0xffffffffffffffff) getsockopt$inet6_mreq(r6, 0x29, 0x15, &(0x7f00000001c0)={@remote, 0x0}, &(0x7f0000000200)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r8, &(0x7f0000000340)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES64=r2, @ANYBLOB="000428bd5700fbdbdf259a00000008000100", @ANYBLOB="975e7eb36ef0838c1a3bb67a1c1406a21730e279a21fb9a7295b1817b7c28e9474005cc4f3462ae782dd73c4f239cc1d6c7e8fc08da88cb2fe2b243d29bfbe87741d10f4616520bb7457db976c1f5bdbae9897d51bd8a43ccb3fd2e670591a2f9e5100966e883596df2e6db6a31668d8b21b007e7d5890a6b7a625b57958586ebd23bb0ce5078adbd49f05c2e61e3548cacc3e5a501cd3c9f4", @ANYBLOB="8400029c33e350a99b812ee0c22167804000010024e900006c625f74785f6d617070696e67000000000000050051818d698103000300000008f504000000000000000000", @ANYRES32=r4, @ANYRESHEX=r9, @ANYRES32=r9, @ANYRESHEX=r2], 0xa0}, 0x1, 0x0, 0x0, 0x80}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r5, r7, 0x25, 0x3, @val=@perf_event={0x10001}}, 0x40) write(r1, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a5", 0x71) sendfile(r1, r2, 0x0, 0xef84) r10 = accept4$inet6(r4, &(0x7f0000000240)={0xa, 0x0, 0x0, @remote}, &(0x7f00000002c0)=0x1c, 0x80000) setsockopt$MRT6_ADD_MFC(r10, 0x29, 0xcc, &(0x7f00000008c0)={{0xa, 0x4e22, 0x200, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xfff}, {0xa, 0x4e20, 0x5543, @empty, 0xfffffffc}, 0x0, {[0x2, 0x4, 0x4, 0x4, 0xfff, 0x8, 0x80000000, 0x400]}}, 0x5c) 65.530771ms ago: executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x2, &(0x7f0000000140)=[{0x35, 0x0, 0x0, 0x5}, {0x16}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{0x5, 0x8, 0x4}, {0x7fff, 0x0, 0x80, 0x4}, {0x4, 0x2f, 0x5, 0x2}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000500)={0x0}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x3e5084, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$SNAPSHOT_SET_SWAP_AREA(r4, 0x3309, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000180)={r1, 0xffffffff7fffffff, 0x80000001}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00'}, 0x90) ftruncate(0xffffffffffffffff, 0xc17a) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000580)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r5, 0x3, r0, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x24}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000016c0), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYRES16=r9, @ANYBLOB="010000000000000000004f0000000e0001006e657464657673696d0000000f02000000657464b8ba912160ecf69aff657673696d3000000800ab000000000008000b000000000006001100ffff0080"], 0x4c}}, 0x0) r10 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000380)={'gre0\x00'}) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000100)=0x3c0, 0x43) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000600)=ANY=[], 0x3000}], 0x1}, 0x0) 40.855694ms ago: executing program 2: syz_read_part_table(0x5be, &(0x7f00000005c0)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) ftruncate(r1, 0xde34) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x13, r1, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0xffffffffffffffff}, 0x0, 0xffffffff}, {{@in=@multicast1}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8) socket$key(0xf, 0x3, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000003240)=ANY=[@ANYBLOB="00000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x5000) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3cea0000", @ANYRES16=0x0, @ANYBLOB="00022bbd7000fddbdf25620000000600b300000000000600b4006f0800000600b300030000000600b400ab1000000600b4006e050000"], 0x3c}}, 0x4000) unshare(0x26020480) unshare(0x20000) 0s ago: executing program 4: ioperm(0x0, 0x3, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021001600000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = dup(r1) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040), 0x4) dup3(r3, r4, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000080)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, r5}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0xe9, &(0x7f0000000340)=""/233}, 0x90) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000380)={'vxcan1\x00', 0x0}) connect$can_j1939(r6, &(0x7f0000000000)={0x1d, r7, 0x0, {0x1}}, 0x18) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0xd2, 0x0, r5, 0xdb, '\x00', r7, r8, 0x3, 0x1, 0x1}, 0x48) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp\x00') r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1c0000001a00010000000000000000001c1400000002"], 0x1c}}, 0x0) preadv(r9, &(0x7f0000000180)=[{&(0x7f0000000100)=""/104, 0x68}], 0x1, 0x2500, 0x0) clock_getres(0x0, &(0x7f0000000100)) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) kernel console output (not intermixed with test programs): atman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.231188][ T6893] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.240406][ T6893] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.247978][ T6893] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.259260][ T6893] veth1_macvtap: left promiscuous mode [ 113.264772][ T6893] veth0_macvtap: left promiscuous mode [ 113.270493][ T6893] veth1_vlan: left promiscuous mode [ 113.275785][ T6893] veth0_vlan: left promiscuous mode [ 113.283315][ T7767] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #19: comm syz-executor.4: corrupted inode contents [ 113.295815][ T7767] EXT4-fs error (device loop4): ext4_dirty_inode:5935: inode #19: comm syz-executor.4: mark_inode_dirty error [ 113.308208][ T7767] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #19: comm syz-executor.4: corrupted inode contents [ 113.320725][ T7767] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3001: inode #19: comm syz-executor.4: mark_inode_dirty error [ 113.336715][ T7767] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3004: inode #19: comm syz-executor.4: mark inode dirty (error -117) [ 113.351605][ T7767] EXT4-fs warning (device loop4): ext4_evict_inode:271: xattr delete (err -117) [ 113.412241][ T6893] team0 (unregistering): Port device team_slave_1 removed [ 113.424080][ T6893] team0 (unregistering): Port device team_slave_0 removed [ 113.492352][ T7750] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.499551][ T7750] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.513544][ T7750] bridge_slave_0: entered allmulticast mode [ 113.520279][ T7750] bridge_slave_0: entered promiscuous mode [ 113.527622][ T7750] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.534705][ T7750] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.541989][ T7750] bridge_slave_1: entered allmulticast mode [ 113.548737][ T7750] bridge_slave_1: entered promiscuous mode [ 113.564873][ T7778] loop3: detected capacity change from 0 to 164 [ 113.573323][ T7778] isofs_fill_super: get root inode failed [ 113.574444][ T7770] wg0 speed is unknown, defaulting to 1000 [ 113.586555][ T7750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.598895][ T7750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.624561][ T7750] team0: Port device team_slave_0 added [ 113.631409][ T7750] team0: Port device team_slave_1 added [ 113.656879][ T7750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.663840][ T7750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.689774][ T7750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.703843][ T7750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.710845][ T7750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.736840][ T7750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.773846][ T7750] hsr_slave_0: entered promiscuous mode [ 113.779872][ T7750] hsr_slave_1: entered promiscuous mode [ 113.846598][ T6893] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.856986][ T6893] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.869120][ T5870] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.879106][ T7770] chnl_net:caif_netlink_parms(): no params data found [ 113.912044][ T6893] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.922522][ T6893] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.947293][ T7770] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.954527][ T7770] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.961861][ T7770] bridge_slave_0: entered allmulticast mode [ 113.969555][ T7770] bridge_slave_0: entered promiscuous mode [ 113.978242][ T7770] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.985361][ T7770] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.988077][ T29] audit: type=1326 audit(1718894457.275:49081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7789 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f97bb8c9f29 code=0x0 [ 113.992700][ T7770] bridge_slave_1: entered allmulticast mode [ 114.022401][ T7770] bridge_slave_1: entered promiscuous mode [ 114.037491][ T6893] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.047823][ T6893] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.067604][ T7770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.078694][ T7770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.090484][ T6893] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.100885][ T6893] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.122674][ T7770] team0: Port device team_slave_0 added [ 114.129397][ T7770] team0: Port device team_slave_1 added [ 114.147518][ T7770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.154565][ T7770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.180566][ T7770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.191904][ T7770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.198983][ T7770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.224934][ T7770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.253073][ T7770] hsr_slave_0: entered promiscuous mode [ 114.259388][ T7770] hsr_slave_1: entered promiscuous mode [ 114.265342][ T7770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.273104][ T7770] Cannot create hsr debugfs directory [ 114.304887][ T6893] bridge_slave_1: left allmulticast mode [ 114.310667][ T6893] bridge_slave_1: left promiscuous mode [ 114.316426][ T6893] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.325999][ T6893] bridge_slave_0: left allmulticast mode [ 114.331712][ T6893] bridge_slave_0: left promiscuous mode [ 114.337561][ T6893] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.404203][ T6893] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 114.498240][ T6893] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.508461][ T6893] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.518625][ T6893] bond0 (unregistering): Released all slaves [ 114.527980][ T6893] bond1 (unregistering): Released all slaves [ 114.536833][ T6893] bond2 (unregistering): Released all slaves [ 114.545591][ T6893] bond3 (unregistering): Released all slaves [ 114.554346][ T6893] bond4 (unregistering): (slave veth3): Releasing backup interface [ 114.564546][ T6893] bond4 (unregistering): Released all slaves [ 114.574000][ T6893] bond5 (unregistering): Released all slaves [ 114.582679][ T6893] bond6 (unregistering): Released all slaves [ 114.591242][ T6893] bond7 (unregistering): Released all slaves [ 114.600092][ T6893] bond8 (unregistering): Released all slaves [ 114.608656][ T6893] bond9 (unregistering): Released all slaves [ 114.618025][ T6893] bond10 (unregistering): Released all slaves [ 114.627281][ T6893] bond11 (unregistering): Released all slaves [ 114.667363][ T7750] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 114.678825][ T7750] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 114.695824][ T7750] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 114.714159][ T7750] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 114.776220][ T7750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.790763][ T7750] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.802508][ T3179] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.809619][ T3179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.833100][ T3179] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.840263][ T3179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.875251][ T7802] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 114.897342][ T7750] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 114.907824][ T7750] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 114.987835][ T6893] hsr_slave_0: left promiscuous mode [ 114.999292][ T6893] hsr_slave_1: left promiscuous mode [ 115.005866][ T6893] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.013352][ T6893] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.039989][ T7808] loop4: detected capacity change from 0 to 512 [ 115.049546][ T7808] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 115.061212][ T6893] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.068675][ T6893] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.078139][ T7808] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 115.086830][ T6893] batman_adv: batadv0: Removing interface: ipvlan2 [ 115.093432][ T7808] System zones: 0-2, 18-18, 34-35 [ 115.103217][ T6893] veth1_macvtap: left promiscuous mode [ 115.108862][ T6893] veth1_vlan: left promiscuous mode [ 115.114154][ T6893] veth0_vlan: left promiscuous mode [ 115.122768][ T7808] EXT4-fs (loop4): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.230842][ T6893] team0 (unregistering): Port device team_slave_1 removed [ 115.241819][ T6893] team0 (unregistering): Port device team_slave_0 removed [ 115.292328][ T5870] EXT4-fs (loop4): unmounting filesystem 00000000-0700-0000-0000-000000000000. [ 115.327186][ T7750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.384556][ T7824] serio: Serial port pts0 [ 115.408554][ T7750] veth0_vlan: entered promiscuous mode [ 115.416895][ T7750] veth1_vlan: entered promiscuous mode [ 115.437426][ T7770] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 115.446107][ T7770] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 115.458294][ T7770] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 115.469819][ T7750] veth0_macvtap: entered promiscuous mode [ 115.476455][ T7770] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 115.485871][ T7750] veth1_macvtap: entered promiscuous mode [ 115.500859][ T7750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.512896][ T7750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.522822][ T7750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.533260][ T7750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.543123][ T7750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.553698][ T7750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.563550][ T7750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.574087][ T7750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.587564][ T7750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.599109][ T7750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.609638][ T7750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.619507][ T7750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.629970][ T7750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.639868][ T7750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.650368][ T7750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.660262][ T7750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.670713][ T7750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.683269][ T7750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.700337][ T7750] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.709188][ T7750] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.718184][ T7750] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.718269][ T7750] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.772158][ T7836] loop3: detected capacity change from 0 to 128 [ 115.778599][ T7770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.797606][ T7770] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.798915][ T7836] FAT-fs (loop3): Directory bread(block 11554) failed [ 115.816556][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.821613][ T7836] FAT-fs (loop3): Directory bread(block 11555) failed [ 115.823676][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.832967][ T7836] FAT-fs (loop3): Directory bread(block 11556) failed [ 115.844790][ T7836] FAT-fs (loop3): Directory bread(block 11557) failed [ 115.853027][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.854635][ T7836] FAT-fs (loop3): Directory bread(block 11558) failed [ 115.860316][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.869775][ T7836] FAT-fs (loop3): Directory bread(block 11559) failed [ 115.881281][ T7836] FAT-fs (loop3): Directory bread(block 11560) failed [ 115.889707][ T7836] FAT-fs (loop3): Directory bread(block 11561) failed [ 115.899707][ T7836] FAT-fs (loop3): Directory bread(block 11562) failed [ 115.907059][ T7836] FAT-fs (loop3): Directory bread(block 11563) failed [ 115.985255][ T7770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.038267][ T7848] tmpfs: Bad value for 'mpol' [ 116.052795][ T29] audit: type=1400 audit(1718894459.335:49082): avc: denied { accept } for pid=7846 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 116.092333][ T29] audit: type=1326 audit(1718894459.375:49083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7853 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd3ea551f29 code=0x0 [ 116.209125][ T7770] veth0_vlan: entered promiscuous mode [ 116.219103][ T7770] veth1_vlan: entered promiscuous mode [ 116.237145][ T7770] veth0_macvtap: entered promiscuous mode [ 116.244757][ T7770] veth1_macvtap: entered promiscuous mode [ 116.264824][ T7770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.275429][ T7770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.285644][ T7770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.296172][ T7770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.306137][ T7770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.316676][ T7770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.326731][ T7770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.337318][ T7770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.347288][ T7770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.357803][ T7770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.370740][ T7770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.383643][ T7770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.394233][ T7770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.404247][ T7770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.414839][ T7770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.424793][ T7770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.435358][ T7770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.445201][ T7770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.455663][ T7770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.465597][ T7770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.476089][ T7770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.489496][ T7770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.502906][ T7770] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.509278][ T7865] loop4: detected capacity change from 0 to 512 [ 116.511836][ T7770] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.526923][ T7770] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.535894][ T7770] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.555849][ T7865] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.568642][ T7865] ext4 filesystem being mounted at /root/syzkaller-testdir143699185/syzkaller.Z5NMFp/113/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.601839][ T7865] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 116.619955][ T7871] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 116.635774][ T7871] lo: entered promiscuous mode [ 116.664201][ T7865] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 116.721208][ T29] audit: type=1400 audit(1718894460.005:49084): avc: denied { listen } for pid=7874 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 116.722232][ T7873] wg0 speed is unknown, defaulting to 1000 [ 116.755583][ T29] audit: type=1400 audit(1718894460.025:49085): avc: denied { write } for pid=7874 comm="syz-executor.1" path="socket:[23791]" dev="sockfs" ino=23791 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 116.779516][ T29] audit: type=1400 audit(1718894460.025:49086): avc: denied { accept } for pid=7874 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 116.799655][ T29] audit: type=1400 audit(1718894460.025:49087): avc: denied { read } for pid=7874 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 116.819546][ T29] audit: type=1400 audit(1718894460.035:49088): avc: denied { setattr } for pid=7874 comm="syz-executor.1" path="socket:[23790]" dev="sockfs" ino=23790 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 116.849973][ T5870] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.024910][ T29] audit: type=1400 audit(1718894460.305:49089): avc: denied { append } for pid=7895 comm="syz-executor.1" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 117.101141][ T7899] siw: device registration error -23 [ 117.273852][ T7906] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 117.293861][ T7906] bond1: entered promiscuous mode [ 117.601757][ T29] audit: type=1326 audit(1718894460.885:49090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7918 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb766fd0f29 code=0x7ffc0000 [ 117.626102][ T29] audit: type=1326 audit(1718894460.885:49091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7918 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb766fd0f29 code=0x7ffc0000 [ 117.663217][ T29] audit: type=1326 audit(1718894460.945:49092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7939 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd3ea551f29 code=0x0 [ 118.200071][ T7952] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 118.212952][ T7952] bond2: entered promiscuous mode [ 118.275085][ T7962] wg0 speed is unknown, defaulting to 1000 [ 118.302455][ T29] audit: type=1400 audit(1718894461.585:49093): avc: denied { ioctl } for pid=7965 comm="syz-executor.1" path="socket:[23922]" dev="sockfs" ino=23922 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 118.360171][ T29] audit: type=1400 audit(1718894461.645:49094): avc: denied { accept } for pid=7968 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 118.360666][ T7969] sctp: [Deprecated]: syz-executor.1 (pid 7969) Use of struct sctp_assoc_value in delayed_ack socket option. [ 118.360666][ T7969] Use struct sctp_sack_info instead [ 118.385288][ T7964] loop3: detected capacity change from 0 to 512 [ 118.408986][ T29] audit: type=1400 audit(1718894461.695:49095): avc: denied { map } for pid=7968 comm="syz-executor.1" path="socket:[23549]" dev="sockfs" ino=23549 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 118.435672][ T7964] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.448273][ T7964] ext4 filesystem being mounted at /root/syzkaller-testdir827871798/syzkaller.Tu8KQW/42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.523355][ T7964] EXT4-fs error (device loop3): ext4_do_update_inode:5075: inode #2: comm syz-executor.3: corrupted inode contents [ 118.535517][ T7977] loop0: detected capacity change from 0 to 512 [ 118.542281][ T7964] EXT4-fs error (device loop3): ext4_dirty_inode:5935: inode #2: comm syz-executor.3: mark_inode_dirty error [ 118.554585][ T7964] EXT4-fs error (device loop3): ext4_do_update_inode:5075: inode #2: comm syz-executor.3: corrupted inode contents [ 118.567708][ T7964] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz-executor.3: mark_inode_dirty error [ 118.569382][ T7977] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.592017][ T7977] ext4 filesystem being mounted at /root/syzkaller-testdir3450293058/syzkaller.6b2oLN/8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.637479][ T7964] Falling back ldisc for ptm0. [ 118.654350][ T7980] siw: device registration error -23 [ 118.741798][ T7223] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.026642][ T29] audit: type=1326 audit(1718894462.315:49096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7983 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97bb8c9f29 code=0x7ffc0000 [ 119.051100][ T29] audit: type=1326 audit(1718894462.315:49097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7983 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97bb8c9f29 code=0x7ffc0000 [ 119.075184][ T29] audit: type=1326 audit(1718894462.315:49098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7983 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f97bb8c9f29 code=0x7ffc0000 [ 119.076830][ T7977] loop0: detected capacity change from 512 to 511 [ 119.141774][ T7988] loop4: detected capacity change from 0 to 2048 [ 119.172833][ T7750] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 22: comm syz-executor.0: path /root/syzkaller-testdir3450293058/syzkaller.6b2oLN/8/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 119.179511][ T7990] capability: warning: `syz-executor.3' uses 32-bit capabilities (legacy support in use) [ 119.199767][ T7750] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 3: comm syz-executor.0: path /root/syzkaller-testdir3450293058/syzkaller.6b2oLN/8/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 119.220917][ T7988] loop4: unable to read partition table [ 119.234890][ T7750] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 4: comm syz-executor.0: path /root/syzkaller-testdir3450293058/syzkaller.6b2oLN/8/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 119.243453][ T7990] loop3: detected capacity change from 0 to 512 [ 119.264828][ T7750] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 5: comm syz-executor.0: path /root/syzkaller-testdir3450293058/syzkaller.6b2oLN/8/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 119.271780][ T7988] loop4: partition table beyond EOD, truncated [ 119.295164][ T7750] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 6: comm syz-executor.0: path /root/syzkaller-testdir3450293058/syzkaller.6b2oLN/8/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 119.300006][ T7988] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 119.326405][ T7750] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 7: comm syz-executor.0: path /root/syzkaller-testdir3450293058/syzkaller.6b2oLN/8/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 119.360673][ T7750] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 8: comm syz-executor.0: path /root/syzkaller-testdir3450293058/syzkaller.6b2oLN/8/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 119.386925][ T7750] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 9: comm syz-executor.0: path /root/syzkaller-testdir3450293058/syzkaller.6b2oLN/8/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 119.413271][ T7750] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 10: comm syz-executor.0: path /root/syzkaller-testdir3450293058/syzkaller.6b2oLN/8/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 119.440287][ T7750] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 11: comm syz-executor.0: path /root/syzkaller-testdir3450293058/syzkaller.6b2oLN/8/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 119.474338][ T7750] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.597057][ T7999] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 119.606680][ T8000] 8021q: VLANs not supported on ipvlan0 [ 119.897787][ T8005] loop4: detected capacity change from 0 to 2048 [ 119.905907][ T8005] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 120.588598][ T8030] siw: device registration error -23 [ 121.006557][ T8032] loop4: detected capacity change from 0 to 2048 [ 121.067184][ T8032] loop4: unable to read partition table [ 121.072928][ T8032] loop4: partition table beyond EOD, truncated [ 121.079118][ T8032] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 121.225032][ T8036] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 121.267168][ T6892] bridge_slave_1: left allmulticast mode [ 121.272936][ T6892] bridge_slave_1: left promiscuous mode [ 121.278730][ T6892] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.287040][ T6892] bridge_slave_0: left allmulticast mode [ 121.292711][ T6892] bridge_slave_0: left promiscuous mode [ 121.298429][ T6892] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.410757][ T6892] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.436748][ T6892] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.447867][ T6892] bond0 (unregistering): Released all slaves [ 121.457382][ T6892] bond1 (unregistering): Released all slaves [ 121.466636][ T6892] bond2 (unregistering): (slave veth3): Releasing backup interface [ 121.476378][ T6892] bond2 (unregistering): Released all slaves [ 121.487947][ T6892] bond3 (unregistering): Released all slaves [ 121.556356][ T6892] bond4 (unregistering): (slave veth5): Releasing backup interface [ 121.579875][ T6892] bond4 (unregistering): Released all slaves [ 121.641544][ T8057] Unknown uid [ 121.671237][ T6892] hsr_slave_0: left promiscuous mode [ 121.680400][ T8057] loop4: detected capacity change from 0 to 164 [ 121.689964][ T6892] hsr_slave_1: left promiscuous mode [ 121.701337][ T6892] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.708888][ T6892] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.742874][ T6892] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.750395][ T6892] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.786735][ T6892] batman_adv: batadv0: Removing interface: ipvlan2 [ 121.822433][ T6892] veth1_macvtap: left promiscuous mode [ 121.828242][ T6892] veth0_macvtap: left promiscuous mode [ 121.833814][ T6892] veth1_vlan: left promiscuous mode [ 121.839841][ T6892] veth0_vlan: left promiscuous mode [ 122.199855][ T6892] team0 (unregistering): Port device team_slave_1 removed [ 122.235286][ T6892] team0 (unregistering): Port device team_slave_0 removed [ 122.355111][ T8061] loop4: detected capacity change from 0 to 1024 [ 122.363572][ T8061] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 122.374845][ T8061] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.396630][ T5870] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.489749][ T8069] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 122.500861][ T8069] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8069 comm=syz-executor.4 [ 122.573013][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 122.573065][ T29] audit: type=1326 audit(1718894465.855:49170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8066 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb766fd0f29 code=0x7ffc0000 [ 122.603337][ T29] audit: type=1326 audit(1718894465.855:49171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8066 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb766fd0f29 code=0x7ffc0000 [ 122.627454][ T29] audit: type=1326 audit(1718894465.875:49172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8066 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fb766fd0f29 code=0x7ffc0000 [ 122.651403][ T29] audit: type=1326 audit(1718894465.875:49173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8066 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb766fd0f29 code=0x7ffc0000 [ 122.654313][ T8070] loop1: detected capacity change from 0 to 8192 [ 122.675470][ T29] audit: type=1326 audit(1718894465.875:49174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8066 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb766fd0f29 code=0x7ffc0000 [ 122.675516][ T29] audit: type=1326 audit(1718894465.875:49175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8066 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7fb766fd0f29 code=0x7ffc0000 [ 122.729941][ T29] audit: type=1326 audit(1718894465.875:49176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8066 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb766fd0f29 code=0x7ffc0000 [ 122.754015][ T29] audit: type=1326 audit(1718894465.875:49177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8066 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb766fd0f29 code=0x7ffc0000 [ 122.778166][ T29] audit: type=1326 audit(1718894465.875:49178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8066 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb766fd0f29 code=0x7ffc0000 [ 122.802275][ T29] audit: type=1326 audit(1718894465.875:49179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8066 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb766fd0f29 code=0x7ffc0000 [ 122.859984][ T6892] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.940065][ T6892] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.961950][ T8078] wg0 speed is unknown, defaulting to 1000 [ 122.990066][ T6892] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.030721][ T8078] chnl_net:caif_netlink_parms(): no params data found [ 123.054995][ T6892] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.098882][ T8078] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.106132][ T8078] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.118337][ T8078] bridge_slave_0: entered allmulticast mode [ 123.125084][ T8078] bridge_slave_0: entered promiscuous mode [ 123.140834][ T8078] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.147999][ T8078] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.155197][ T8078] bridge_slave_1: entered allmulticast mode [ 123.164392][ T8078] bridge_slave_1: entered promiscuous mode [ 123.190156][ T6892] bridge_slave_1: left allmulticast mode [ 123.195854][ T6892] bridge_slave_1: left promiscuous mode [ 123.201577][ T6892] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.209457][ T6892] bridge_slave_0: left allmulticast mode [ 123.215117][ T6892] bridge_slave_0: left promiscuous mode [ 123.220818][ T6892] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.320664][ T6892] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.339828][ T6892] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.359101][ T6892] bond0 (unregistering): Released all slaves [ 123.397203][ T8078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.418827][ T8078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.462207][ T8078] team0: Port device team_slave_0 added [ 123.473176][ T8078] team0: Port device team_slave_1 added [ 123.486586][ T6892] hsr_slave_0: left promiscuous mode [ 123.499112][ T6892] hsr_slave_1: left promiscuous mode [ 123.522122][ T6892] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.529614][ T6892] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.548970][ T6892] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.556459][ T6892] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.572906][ T6892] veth1_macvtap: left promiscuous mode [ 123.578469][ T6892] veth0_macvtap: left promiscuous mode [ 123.584097][ T6892] veth1_vlan: left promiscuous mode [ 123.589510][ T6892] veth0_vlan: left promiscuous mode [ 123.731514][ T6892] team0 (unregistering): Port device team_slave_1 removed [ 123.747037][ T6892] team0 (unregistering): Port device team_slave_0 removed [ 123.819289][ T8078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.826504][ T8078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.852578][ T8078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.864081][ T8078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.871226][ T8078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.897183][ T8078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.956175][ T8107] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 123.964283][ T8107] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 123.973485][ T8109] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 123.988253][ T8078] hsr_slave_0: entered promiscuous mode [ 123.994441][ T8078] hsr_slave_1: entered promiscuous mode [ 124.125292][ T8122] 9pnet_fd: Insufficient options for proto=fd [ 124.146645][ T8124] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 124.229177][ T8128] sctp: [Deprecated]: syz-executor.4 (pid 8128) Use of int in max_burst socket option. [ 124.229177][ T8128] Use struct sctp_assoc_value instead [ 124.330320][ T8078] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 124.338792][ T8078] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 124.347374][ T8078] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 124.355929][ T8078] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 124.391717][ T8078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.407313][ T8078] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.416686][ T3180] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.423801][ T3180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.436442][ T2749] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.443539][ T2749] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.506991][ T8078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.572952][ T8078] veth0_vlan: entered promiscuous mode [ 124.583530][ T8078] veth1_vlan: entered promiscuous mode [ 124.599313][ T8078] veth0_macvtap: entered promiscuous mode [ 124.606900][ T8078] veth1_macvtap: entered promiscuous mode [ 124.617133][ T8078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.627697][ T8078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.637706][ T8078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.648161][ T8078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.657968][ T8078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.668512][ T8078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.678374][ T8078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.688808][ T8078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.699735][ T8078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.711605][ T8078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.722067][ T8078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.731888][ T8078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.742317][ T8078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.752146][ T8078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.762575][ T8078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.772472][ T8078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.782984][ T8078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.793929][ T8078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.804239][ T8078] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.813048][ T8078] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.821946][ T8078] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.830729][ T8078] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.928130][ T8150] loop0: detected capacity change from 0 to 2048 [ 124.960500][ T8150] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.061835][ T8155] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 125.087878][ T8155] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1206 with error 28 [ 125.100398][ T8155] EXT4-fs (loop0): This should not happen!! Data will be lost [ 125.100398][ T8155] [ 125.110167][ T8155] EXT4-fs (loop0): Total free blocks count 0 [ 125.116230][ T8155] EXT4-fs (loop0): Free/Dirty block details [ 125.122259][ T8155] EXT4-fs (loop0): free_blocks=2415919104 [ 125.128027][ T8155] EXT4-fs (loop0): dirty_blocks=1216 [ 125.133378][ T8155] EXT4-fs (loop0): Block reservation details [ 125.139418][ T8155] EXT4-fs (loop0): i_reserved_data_blocks=76 [ 125.416429][ T6892] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 1206 with max blocks 2048 with error 28 [ 125.502343][ T8168] netlink: 37 bytes leftover after parsing attributes in process `syz-executor.1'. [ 125.702590][ T8177] loop0: detected capacity change from 0 to 2048 [ 125.714591][ T8177] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.731195][ T8176] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor.0: bg 0: block 234: padding at end of block bitmap is not set [ 125.750808][ T8176] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 117 [ 125.763279][ T8176] EXT4-fs (loop0): This should not happen!! Data will be lost [ 125.763279][ T8176] [ 125.780381][ T8078] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.847603][ T8188] loop4: detected capacity change from 0 to 1024 [ 125.861917][ T8191] process 'syz-executor.0' launched './file2' with NULL argv: empty string added [ 125.875113][ T8188] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a843c118, mo2=0002] [ 125.883392][ T8188] System zones: 0-1, 3-12 [ 125.890309][ T8188] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.915789][ T8188] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 125.918995][ T8200] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 125.934075][ T8198] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 125.934160][ T8188] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a843c118, mo2=0002] [ 125.960100][ T8188] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 125.971581][ T8205] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 125.979893][ T8207] loop1: detected capacity change from 0 to 512 [ 125.986849][ T8188] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2856: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 126.000231][ T8205] lo: entered promiscuous mode [ 126.002126][ T8207] EXT4-fs (loop1): orphan cleanup on readonly fs [ 126.012284][ T8207] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor.1: bg 0: block 248: padding at end of block bitmap is not set [ 126.028404][ T8207] EXT4-fs error (device loop1): ext4_acquire_dquot:6860: comm syz-executor.1: Failed to acquire dquot type 1 [ 126.028898][ T8207] EXT4-fs (loop1): 1 truncate cleaned up [ 126.056398][ T8207] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 126.069804][ T5870] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.085179][ T7770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.594147][ T8232] loop4: detected capacity change from 0 to 764 [ 126.616881][ T8232] iso9660: Unknown parameter '' [ 126.671906][ T8232] loop4: detected capacity change from 0 to 512 [ 126.689764][ T8232] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 126.708685][ T8232] EXT4-fs (loop4): orphan cleanup on readonly fs [ 126.720463][ T8232] EXT4-fs error (device loop4): ext4_orphan_get:1420: comm syz-executor.4: bad orphan inode 15 [ 126.749001][ T8232] ext4_test_bit(bit=14, block=18) = 1 [ 126.754418][ T8232] is_bad_inode(inode)=0 [ 126.758667][ T8232] NEXT_ORPHAN(inode)=1023 [ 126.762999][ T8232] max_ino=32 [ 126.766440][ T8232] i_nlink=0 [ 126.806892][ T8232] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2972: inode #15: comm syz-executor.4: corrupted xattr block 19: e_value size too large [ 126.822058][ T8232] EXT4-fs warning (device loop4): ext4_evict_inode:271: xattr delete (err -117) [ 126.833289][ T8232] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 126.878472][ T5870] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.896220][ T8237] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 126.934207][ T8241] usb usb8: usbfs: process 8241 (syz-executor.4) did not claim interface 0 before use [ 126.976439][ T8245] loop0: detected capacity change from 0 to 512 [ 126.986688][ T8245] EXT4-fs (loop0): corrupt root inode, run e2fsck [ 126.993141][ T8245] EXT4-fs (loop0): mount failed [ 127.043521][ T8245] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 127.054158][ T8254] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 127.182884][ T8260] 9pnet_fd: Insufficient options for proto=fd [ 127.544128][ T8269] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 127.673492][ T29] kauditd_printk_skb: 15291 callbacks suppressed [ 127.673519][ T29] audit: type=1326 audit(1718894470.951:64469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8279 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb766fd0f29 code=0x7ffc0000 [ 127.691783][ T8282] syz-executor.1[8282] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.704171][ T29] audit: type=1326 audit(1718894470.951:64470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8279 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb766fd0f29 code=0x7ffc0000 [ 127.704602][ T29] audit: type=1326 audit(1718894470.951:64471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8279 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb766fd0f29 code=0x7ffc0000 [ 127.717612][ T8282] syz-executor.1[8282] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.739904][ T29] audit: type=1326 audit(1718894470.951:64472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8279 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb766fd0f29 code=0x7ffc0000 [ 127.799752][ T29] audit: type=1326 audit(1718894470.951:64473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8279 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb766fd0f29 code=0x7ffc0000 [ 127.823841][ T29] audit: type=1326 audit(1718894470.951:64474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8279 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7fb766fd0f29 code=0x7ffc0000 [ 127.847913][ T29] audit: type=1326 audit(1718894470.951:64475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8279 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb766fd0f29 code=0x7ffc0000 [ 127.871943][ T29] audit: type=1326 audit(1718894470.951:64476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8279 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb766fd0f29 code=0x7ffc0000 [ 127.896002][ T29] audit: type=1326 audit(1718894470.951:64477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8279 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb766fd0f29 code=0x7ffc0000 [ 127.945560][ T8288] loop0: detected capacity change from 0 to 512 [ 127.962269][ T8288] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 127.970749][ T8288] EXT4-fs error (device loop0): ext4_get_journal_inode:5752: comm syz-executor.0: inode #67108864: comm syz-executor.0: iget: illegal inode # [ 127.987315][ T8288] EXT4-fs (loop0): no journal found [ 127.992615][ T8288] EXT4-fs (loop0): can't get journal size [ 128.006174][ T29] audit: type=1400 audit(1718894471.291:64478): avc: denied { accept } for pid=8281 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 128.006914][ T8288] EXT4-fs (loop0): failed to initialize system zone (-22) [ 128.046608][ T8288] EXT4-fs (loop0): mount failed [ 128.358720][ T8298] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 129.273218][ T8318] loop1: detected capacity change from 0 to 2048 [ 129.287325][ T8318] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.300569][ T8318] usb usb8: usbfs: process 8318 (syz-executor.1) did not claim interface 0 before use [ 129.311635][ T8318] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor.1: bg 0: block 234: padding at end of block bitmap is not set [ 129.326636][ T8318] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 117 [ 129.339031][ T8318] EXT4-fs (loop1): This should not happen!! Data will be lost [ 129.339031][ T8318] [ 129.358059][ T7770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.417795][ T8338] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 130.587201][ T8347] usb usb8: usbfs: process 8347 (syz-executor.1) did not claim interface 0 before use [ 131.292211][ T6890] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.389753][ T6890] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.440118][ T6890] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.479892][ T6890] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.499466][ T8369] wg0 speed is unknown, defaulting to 1000 [ 131.562772][ T6890] bridge_slave_1: left allmulticast mode [ 131.568503][ T6890] bridge_slave_1: left promiscuous mode [ 131.574200][ T6890] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.582213][ T6890] bridge_slave_0: left allmulticast mode [ 131.587976][ T6890] bridge_slave_0: left promiscuous mode [ 131.593605][ T6890] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.718112][ T6890] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.729001][ T6890] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.739456][ T6890] bond0 (unregistering): Released all slaves [ 131.749437][ T8380] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 131.771901][ T8369] chnl_net:caif_netlink_parms(): no params data found [ 131.796834][ T8387] loop1: detected capacity change from 0 to 1024 [ 131.806338][ T8387] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.824837][ T8369] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.831964][ T8369] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.839833][ T8369] bridge_slave_0: entered allmulticast mode [ 131.846267][ T8369] bridge_slave_0: entered promiscuous mode [ 131.853441][ T8369] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.860595][ T8369] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.868218][ T8369] bridge_slave_1: entered allmulticast mode [ 131.874695][ T8369] bridge_slave_1: entered promiscuous mode [ 131.883031][ T6890] hsr_slave_0: left promiscuous mode [ 131.883656][ T7770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.897709][ T6890] hsr_slave_1: left promiscuous mode [ 131.903567][ T6890] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.911104][ T6890] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.918704][ T6890] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.926139][ T6890] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.935317][ T6890] veth1_macvtap: left promiscuous mode [ 131.940828][ T6890] veth0_macvtap: left promiscuous mode [ 131.946382][ T6890] veth1_vlan: left promiscuous mode [ 131.951675][ T6890] veth0_vlan: left promiscuous mode [ 131.959409][ T8395] usb usb8: usbfs: process 8395 (syz-executor.1) did not claim interface 0 before use [ 131.988040][ T8398] loop1: detected capacity change from 0 to 512 [ 132.072549][ T6890] team0 (unregistering): Port device team_slave_1 removed [ 132.083004][ T6890] team0 (unregistering): Port device team_slave_0 removed [ 132.143948][ T8369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.156516][ T8369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.180121][ T8369] team0: Port device team_slave_0 added [ 132.188493][ T8369] team0: Port device team_slave_1 added [ 132.205553][ T8369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.212514][ T8369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.238447][ T8369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.249999][ T8369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.257010][ T8369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.283007][ T8369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.311306][ T8369] hsr_slave_0: entered promiscuous mode [ 132.318619][ T8369] hsr_slave_1: entered promiscuous mode [ 132.690426][ T6890] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.700289][ T6890] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.728807][ T8369] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 132.742847][ T8369] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 132.767119][ T6890] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.776935][ T6890] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.791188][ T8369] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 132.805537][ T8369] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 132.827558][ T6890] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.837423][ T6890] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.891369][ T6890] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.901223][ T6890] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.918458][ T8369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.924968][ T29] kauditd_printk_skb: 79 callbacks suppressed [ 132.924983][ T29] audit: type=1400 audit(1718894476.201:64558): avc: denied { ioctl } for pid=8427 comm="syz-executor.4" path="/dev/virtual_nci" dev="devtmpfs" ino=108 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 132.930604][ T8369] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.943612][ T8428] loop4: detected capacity change from 0 to 512 [ 132.961923][ T971] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.966375][ T8428] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 132.969570][ T971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.997788][ T8428] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.998190][ T8414] wg0 speed is unknown, defaulting to 1000 [ 133.017397][ T8428] ext4 filesystem being mounted at /root/syzkaller-testdir143699185/syzkaller.Z5NMFp/164/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.018521][ T3181] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.039372][ T3181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.052455][ T8428] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 133.080658][ T5870] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.087530][ T8369] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 133.122408][ T6890] bridge_slave_1: left allmulticast mode [ 133.128213][ T6890] bridge_slave_1: left promiscuous mode [ 133.133876][ T6890] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.142841][ T6890] bridge_slave_0: left allmulticast mode [ 133.148678][ T6890] bridge_slave_0: left promiscuous mode [ 133.154530][ T6890] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.162929][ T8441] netlink: 37 bytes leftover after parsing attributes in process `syz-executor.4'. [ 133.236115][ T6890] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 133.258290][ T8451] usb usb8: usbfs: process 8451 (syz-executor.4) did not claim interface 0 before use [ 133.327725][ T6890] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.338057][ T6890] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.348135][ T6890] bond0 (unregistering): Released all slaves [ 133.357081][ T6890] bond1 (unregistering): Released all slaves [ 133.365234][ T6890] bond2 (unregistering): Released all slaves [ 133.373902][ T6890] bond3 (unregistering): (slave veth3): Releasing backup interface [ 133.383401][ T6890] bond3 (unregistering): Released all slaves [ 133.393244][ T6890] bond4 (unregistering): Released all slaves [ 133.401931][ T8443] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 133.452200][ T29] audit: type=1326 audit(1718894476.731:64559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8452 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f97bb8c9f29 code=0x0 [ 133.459442][ T8369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.514150][ T8453] infiniband syz2: set active [ 133.518993][ T8453] infiniband syz2: added team_slave_1 [ 133.520312][ T8414] chnl_net:caif_netlink_parms(): no params data found [ 133.547283][ T8453] RDS/IB: syz2: added [ 133.551301][ T8453] smc: adding ib device syz2 with port count 1 [ 133.562386][ T8453] smc: ib device syz2 port 1 has pnetid [ 133.577997][ T6890] hsr_slave_0: left promiscuous mode [ 133.593329][ T6890] hsr_slave_1: left promiscuous mode [ 133.601057][ T6890] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.608559][ T6890] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.611698][ T8473] loop1: detected capacity change from 0 to 512 [ 133.623412][ T8473] EXT4-fs: Ignoring removed nobh option [ 133.623792][ T6890] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.636476][ T6890] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.645414][ T6890] veth1_macvtap: left promiscuous mode [ 133.648398][ T8473] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.651007][ T6890] veth0_macvtap: left promiscuous mode [ 133.664701][ T8473] ext4 filesystem being mounted at /root/syzkaller-testdir674514712/syzkaller.7VCUEt/80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.668809][ T6890] veth1_vlan: left promiscuous mode [ 133.688632][ T6890] veth0_vlan: left promiscuous mode [ 133.690350][ T8473] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor.1: bg 0: block 224: padding at end of block bitmap is not set [ 133.708696][ T8473] EXT4-fs (loop1): Remounting filesystem read-only [ 133.722828][ T7770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.733493][ T6891] Quota error (device loop1): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 133.747754][ T6891] Quota error (device loop1): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 133.818866][ T6890] team0 (unregistering): Port device team_slave_1 removed [ 133.829130][ T6890] team0 (unregistering): Port device team_slave_0 removed [ 133.872633][ T3181] wg0 speed is unknown, defaulting to 1000 [ 133.891936][ T8414] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.899209][ T8414] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.916830][ T8414] bridge_slave_0: entered allmulticast mode [ 133.923340][ T8414] bridge_slave_0: entered promiscuous mode [ 133.940342][ T8369] veth0_vlan: entered promiscuous mode [ 133.946387][ T8414] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.953488][ T8414] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.963734][ T8414] bridge_slave_1: entered allmulticast mode [ 133.970563][ T8414] bridge_slave_1: entered promiscuous mode [ 133.984314][ T8484] loop1: detected capacity change from 0 to 2048 [ 133.994295][ T8414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.004958][ T8414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.017257][ T8369] veth1_vlan: entered promiscuous mode [ 134.017461][ T8484] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.041093][ T29] audit: type=1326 audit(1718894477.321:64560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8476 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb766fd0f29 code=0x7ffc0000 [ 134.065213][ T29] audit: type=1326 audit(1718894477.321:64561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8476 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb766fd0f29 code=0x7ffc0000 [ 134.091273][ T29] audit: type=1326 audit(1718894477.321:64562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8476 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb766fd0f29 code=0x7ffc0000 [ 134.116149][ T29] audit: type=1326 audit(1718894477.321:64563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8476 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb766fd0f29 code=0x7ffc0000 [ 134.140225][ T29] audit: type=1326 audit(1718894477.321:64564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8476 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7fb766fd0f29 code=0x7ffc0000 [ 134.164259][ T29] audit: type=1326 audit(1718894477.321:64565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8476 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb766fd0f29 code=0x7ffc0000 [ 134.189796][ T8414] team0: Port device team_slave_0 added [ 134.200467][ T8414] team0: Port device team_slave_1 added [ 134.220132][ T8414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.227444][ T8414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.253626][ T8414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.265028][ T8414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.272092][ T8414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.298154][ T8414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.329327][ T8369] veth0_macvtap: entered promiscuous mode [ 134.344804][ T8414] hsr_slave_0: entered promiscuous mode [ 134.351380][ T8414] hsr_slave_1: entered promiscuous mode [ 134.357342][ T8414] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.364904][ T8414] Cannot create hsr debugfs directory [ 134.371325][ T8369] veth1_macvtap: entered promiscuous mode [ 134.389239][ T8369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.399751][ T8369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.409582][ T8369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.420013][ T8369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.429844][ T8369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.440366][ T8369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.451275][ T8369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.464969][ T8369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.475627][ T8369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.485554][ T8369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.495989][ T8369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.505799][ T8369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.516228][ T8369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.527358][ T8369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.550374][ T8369] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.559290][ T8369] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.568035][ T8369] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.576791][ T8369] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.651084][ T6890] IPVS: stop unused estimator thread 0... [ 134.658244][ T7770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.672011][ T8491] loop0: detected capacity change from 0 to 164 [ 134.778303][ T8500] loop0: detected capacity change from 0 to 2048 [ 134.832780][ T8414] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 134.833593][ T8500] loop0: unable to read partition table [ 134.845408][ T8500] loop0: partition table beyond EOD, truncated [ 134.851634][ T8500] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 134.862229][ T8414] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 134.871987][ T8414] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 134.899443][ T8414] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 134.950185][ T8414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.972654][ T8414] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.983896][ T971] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.991008][ T971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.014805][ T3183] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.021957][ T3183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.022414][ T8504] netlink: 37 bytes leftover after parsing attributes in process `syz-executor.0'. [ 135.052717][ T8414] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 135.126408][ T8511] usb usb8: usbfs: process 8511 (syz-executor.0) did not claim interface 0 before use [ 135.145169][ T8414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.212201][ T8514] x_tables: ip_tables: osf match: only valid for protocol 6 [ 135.222468][ T8514] loop1: detected capacity change from 0 to 512 [ 135.232294][ T8526] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 135.245182][ T8514] EXT4-fs error (device loop1): ext4_acquire_dquot:6860: comm syz-executor.1: Failed to acquire dquot type 1 [ 135.253080][ T8414] veth0_vlan: entered promiscuous mode [ 135.258876][ T8514] EXT4-fs (loop1): 1 truncate cleaned up [ 135.265885][ T8414] veth1_vlan: entered promiscuous mode [ 135.273975][ T8514] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.288142][ T8514] ext4 filesystem being mounted at /root/syzkaller-testdir674514712/syzkaller.7VCUEt/83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.299313][ T8414] veth0_macvtap: entered promiscuous mode [ 135.310369][ T8514] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.313800][ T8414] veth1_macvtap: entered promiscuous mode [ 135.334823][ T8414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.345580][ T8414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.355404][ T8414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.366432][ T8414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.376274][ T8414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.386782][ T8414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.396675][ T8414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.407128][ T8414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.420860][ T8414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.430712][ T8414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.441291][ T8414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.451291][ T8414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.454814][ T8539] loop0: detected capacity change from 0 to 512 [ 135.461726][ T8414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.461773][ T8414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.477791][ T8539] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 135.478621][ T8539] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 135.488310][ T8414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.488337][ T8414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.499658][ T8539] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84ec02c, mo2=0002] [ 135.506291][ T8414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.507998][ T8414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.516409][ T8539] System zones: [ 135.534694][ T8414] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.544714][ T8539] 0-2 [ 135.551973][ T8414] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.555553][ T8539] , 18-18 [ 135.564153][ T8414] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.566737][ T8539] , 34-34 [ 135.575396][ T8414] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.599018][ T8539] [ 135.605598][ T8539] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 135.620781][ T8539] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor.0: bg 0: block 408: padding at end of block bitmap is not set [ 135.639922][ T8539] EXT4-fs (loop0): Remounting filesystem read-only [ 135.647640][ T8539] EXT4-fs (loop0): 1 truncate cleaned up [ 135.653918][ T8539] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.666917][ T8539] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 135.673859][ T8539] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.714546][ T8545] loop2: detected capacity change from 0 to 2048 [ 135.781553][ T8545] loop2: unable to read partition table [ 135.787470][ T8545] loop2: partition table beyond EOD, truncated [ 135.793649][ T8545] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 135.829494][ T8552] netlink: 37 bytes leftover after parsing attributes in process `syz-executor.0'. [ 135.899238][ T8554] usb usb8: usbfs: process 8554 (syz-executor.0) did not claim interface 0 before use [ 135.928086][ T8558] loop2: detected capacity change from 0 to 128 [ 135.938397][ T8558] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 135.950761][ T8558] ext4 filesystem being mounted at /root/syzkaller-testdir2769535030/syzkaller.ORnNRG/2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 135.991007][ T8560] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 136.009034][ T8414] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 136.094482][ T8576] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 136.141416][ T8578] loop1: detected capacity change from 0 to 1024 [ 136.156875][ T8578] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a843c118, mo2=0002] [ 136.165121][ T8578] System zones: 0-1, 3-12 [ 136.170171][ T8578] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.174007][ T8580] loop2: detected capacity change from 0 to 128 [ 136.189664][ T8578] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 136.201006][ T8578] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a843c118, mo2=0002] [ 136.226308][ T8578] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 136.247062][ T7770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.303129][ T8597] usb usb8: usbfs: process 8597 (syz-executor.1) did not claim interface 0 before use [ 136.328463][ T8601] loop4: detected capacity change from 0 to 128 [ 136.338844][ T8601] FAT-fs (loop4): Directory bread(block 11554) failed [ 136.346885][ T8601] FAT-fs (loop4): Directory bread(block 11555) failed [ 136.353692][ T8601] FAT-fs (loop4): Directory bread(block 11556) failed [ 136.360664][ T8601] FAT-fs (loop4): Directory bread(block 11557) failed [ 136.367525][ T8601] FAT-fs (loop4): Directory bread(block 11558) failed [ 136.374377][ T8601] FAT-fs (loop4): Directory bread(block 11559) failed [ 136.381295][ T8601] FAT-fs (loop4): Directory bread(block 11560) failed [ 136.388254][ T8601] FAT-fs (loop4): Directory bread(block 11561) failed [ 136.395154][ T8601] FAT-fs (loop4): Directory bread(block 11562) failed [ 136.402005][ T8601] FAT-fs (loop4): Directory bread(block 11563) failed [ 136.452531][ T8616] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 136.562195][ T8624] loop1: detected capacity change from 0 to 128 [ 136.570262][ T8624] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 136.583561][ T8624] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 136.597937][ T8624] 9pnet_fd: Insufficient options for proto=fd [ 136.604265][ T8625] 9pnet_fd: Insufficient options for proto=fd [ 137.071467][ T8599] syz-executor.4 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 137.082878][ T8599] CPU: 0 PID: 8599 Comm: syz-executor.4 Not tainted 6.10.0-rc4-syzkaller-00052-ge5b3efbe1ab1 #0 [ 137.093287][ T8599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 137.103470][ T8599] Call Trace: [ 137.106770][ T8599] [ 137.109707][ T8599] dump_stack_lvl+0xf2/0x150 [ 137.114316][ T8599] dump_stack+0x15/0x20 [ 137.118513][ T8599] dump_header+0x83/0x2d0 [ 137.122874][ T8599] oom_kill_process+0x33e/0x4c0 [ 137.127877][ T8599] out_of_memory+0x9af/0xbe0 [ 137.132495][ T8599] mem_cgroup_out_of_memory+0x13e/0x190 [ 137.138108][ T8599] try_charge_memcg+0x745/0xcd0 [ 137.143069][ T8599] ? _raw_spin_unlock+0x26/0x50 [ 137.147932][ T8599] ? radix_tree_lookup+0xf9/0x150 [ 137.152959][ T8599] mem_cgroup_swapin_charge_folio+0x107/0x1a0 [ 137.159096][ T8599] __read_swap_cache_async+0x2b9/0x520 [ 137.164592][ T8599] swap_cluster_readahead+0x276/0x3f0 [ 137.170084][ T8599] swapin_readahead+0xe2/0x7a0 [ 137.174926][ T8599] ? __filemap_get_folio+0x420/0x5b0 [ 137.180212][ T8599] ? swap_cache_get_folio+0x6e/0x210 [ 137.185520][ T8599] do_swap_page+0x3bc/0x1840 [ 137.190309][ T8599] ? exc_page_fault+0x32e/0x650 [ 137.195289][ T8599] ? __rcu_read_lock+0x36/0x50 [ 137.200139][ T8599] handle_mm_fault+0x809/0x2a80 [ 137.204994][ T8599] ? mas_walk+0x204/0x320 [ 137.209378][ T8599] exc_page_fault+0x3b9/0x650 [ 137.214056][ T8599] asm_exc_page_fault+0x26/0x30 [ 137.218920][ T8599] RIP: 0033:0x7f97bb8840b4 [ 137.223422][ T8599] Code: 01 00 00 69 3d 01 e6 ca 00 e8 03 00 00 48 8d 1d e2 ce 17 00 e8 0d 5e 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 77 f0 ff ff eb [ 137.243060][ T8599] RSP: 002b:00007fffd0200ef0 EFLAGS: 00010283 [ 137.249139][ T8599] RAX: 0000000000000000 RBX: 00007f97bba01050 RCX: 0000000000000000 [ 137.257123][ T8599] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00005555667e7788 [ 137.265095][ T8599] RBP: 00007f97bba02980 R08: 0000000000000000 R09: 7fffffffffffffff [ 137.273085][ T8599] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000217b8 [ 137.281218][ T8599] R13: 00007f97bba0105c R14: 0000000000000032 R15: 00007f97bba02980 [ 137.289267][ T8599] [ 137.292577][ T8599] memory: usage 307200kB, limit 307200kB, failcnt 222 [ 137.299598][ T8599] memory+swap: usage 307656kB, limit 9007199254740988kB, failcnt 0 [ 137.307506][ T8599] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 137.314781][ T8599] Memory cgroup stats for /syz4: [ 137.314982][ T8599] cache 12288 [ 137.323240][ T8599] rss 0 [ 137.326013][ T8599] shmem 0 [ 137.328936][ T8599] mapped_file 0 [ 137.332407][ T8599] dirty 12288 [ 137.335710][ T8599] writeback 0 [ 137.339001][ T8599] workingset_refault_anon 340 [ 137.343694][ T8599] workingset_refault_file 26 [ 137.348377][ T8599] swap 466944 [ 137.351732][ T8599] swapcached 8192 [ 137.355351][ T8599] pgpgin 191758 [ 137.358828][ T8599] pgpgout 191753 [ 137.362399][ T8599] pgfault 205339 [ 137.365958][ T8599] pgmajfault 143 [ 137.369509][ T8599] inactive_anon 8192 [ 137.373406][ T8599] active_anon 0 [ 137.376878][ T8599] inactive_file 12288 [ 137.380868][ T8599] active_file 0 [ 137.384363][ T8599] unevictable 0 [ 137.387841][ T8599] hierarchical_memory_limit 314572800 [ 137.393214][ T8599] hierarchical_memsw_limit 9223372036854771712 [ 137.399390][ T8599] total_cache 12288 [ 137.403271][ T8599] total_rss 0 [ 137.406576][ T8599] total_shmem 0 [ 137.410022][ T8599] total_mapped_file 0 [ 137.413996][ T8599] total_dirty 12288 [ 137.417879][ T8599] total_writeback 0 [ 137.421728][ T8599] total_workingset_refault_anon 340 [ 137.426998][ T8599] total_workingset_refault_file 26 [ 137.432166][ T8599] total_swap 466944 [ 137.435985][ T8599] total_swapcached 8192 [ 137.440133][ T8599] total_pgpgin 191758 [ 137.444122][ T8599] total_pgpgout 191753 [ 137.448200][ T8599] total_pgfault 205339 [ 137.452256][ T8599] total_pgmajfault 143 [ 137.456370][ T8599] total_inactive_anon 8192 [ 137.460784][ T8599] total_active_anon 0 [ 137.464808][ T8599] total_inactive_file 12288 [ 137.469367][ T8599] total_active_file 0 [ 137.473364][ T8599] total_unevictable 0 [ 137.477343][ T8599] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=8599,uid=0 [ 137.492626][ T8599] Memory cgroup out of memory: Killed process 8599 (syz-executor.4) total-vm:46572kB, anon-rss:548kB, file-rss:8892kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 137.655034][ T8638] usb usb8: usbfs: process 8638 (syz-executor.1) did not claim interface 0 before use [ 137.761252][ T8644] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.768560][ T8644] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.775828][ T8644] bridge0: entered promiscuous mode [ 137.788948][ T8646] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 137.823747][ T8648] loop4: detected capacity change from 0 to 1024 [ 137.836687][ T8648] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.889897][ T5870] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.949110][ T8658] loop0: detected capacity change from 0 to 2048 [ 137.967902][ T8658] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.981837][ T29] kauditd_printk_skb: 120 callbacks suppressed [ 137.981853][ T29] audit: type=1400 audit(1718894481.261:64684): avc: denied { execute } for pid=8655 comm="syz-executor.0" path="/root/syzkaller-testdir87049845/syzkaller.nnWtay/21/file0/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 138.017911][ T8658] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 138.031389][ T8658] EXT4-fs (loop0): Online resizing not supported with bigalloc [ 138.040140][ T8658] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 138.054967][ T8658] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 138.067390][ T8658] EXT4-fs (loop0): This should not happen!! Data will be lost [ 138.067390][ T8658] [ 138.077257][ T8658] EXT4-fs (loop0): Total free blocks count 0 [ 138.083241][ T8658] EXT4-fs (loop0): Free/Dirty block details [ 138.089242][ T8658] EXT4-fs (loop0): free_blocks=2415919104 [ 138.095023][ T8658] EXT4-fs (loop0): dirty_blocks=32 [ 138.100188][ T8658] EXT4-fs (loop0): Block reservation details [ 138.106241][ T8658] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 138.139209][ T8674] usb usb8: usbfs: process 8674 (syz-executor.4) did not claim interface 0 before use [ 138.180571][ T8681] loop4: detected capacity change from 0 to 128 [ 138.190180][ T8681] FAT-fs (loop4): Directory bread(block 11554) failed [ 138.197099][ T8681] FAT-fs (loop4): Directory bread(block 11555) failed [ 138.204150][ T8681] FAT-fs (loop4): Directory bread(block 11556) failed [ 138.212197][ T8681] FAT-fs (loop4): Directory bread(block 11557) failed [ 138.219151][ T8681] FAT-fs (loop4): Directory bread(block 11558) failed [ 138.226047][ T8681] FAT-fs (loop4): Directory bread(block 11559) failed [ 138.232880][ T8681] FAT-fs (loop4): Directory bread(block 11560) failed [ 138.240169][ T8681] FAT-fs (loop4): Directory bread(block 11561) failed [ 138.247146][ T8681] FAT-fs (loop4): Directory bread(block 11562) failed [ 138.253932][ T8681] FAT-fs (loop4): Directory bread(block 11563) failed [ 138.575550][ T8687] bond1: (slave veth3): Enslaving as an active interface with an up link [ 138.620099][ T8690] loop1: detected capacity change from 0 to 256 [ 138.628784][ T8690] FAT-fs (loop1): bogus number of FAT structure [ 138.635092][ T8690] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 138.644386][ T8690] FAT-fs (loop1): Can't find a valid FAT filesystem [ 138.741390][ T29] audit: type=1400 audit(1718894482.021:64685): avc: denied { connect } for pid=8689 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 138.762215][ T29] audit: type=1326 audit(1718894482.021:64686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8689 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb766fd0f29 code=0x7ffc0000 [ 138.786265][ T29] audit: type=1326 audit(1718894482.021:64687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8689 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb766fd0f29 code=0x7ffc0000 [ 138.891788][ T5870] syz-executor.4 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 138.902998][ T5870] CPU: 0 PID: 5870 Comm: syz-executor.4 Not tainted 6.10.0-rc4-syzkaller-00052-ge5b3efbe1ab1 #0 [ 138.913430][ T5870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 138.923485][ T5870] Call Trace: [ 138.926757][ T5870] [ 138.929757][ T5870] dump_stack_lvl+0xf2/0x150 [ 138.934359][ T5870] dump_stack+0x15/0x20 [ 138.938632][ T5870] dump_header+0x83/0x2d0 [ 138.942969][ T5870] oom_kill_process+0x33e/0x4c0 [ 138.947969][ T5870] out_of_memory+0x9af/0xbe0 [ 138.952566][ T5870] mem_cgroup_out_of_memory+0x13e/0x190 [ 138.958175][ T5870] try_charge_memcg+0x745/0xcd0 [ 138.963032][ T5870] ? _raw_spin_unlock+0x26/0x50 [ 138.967931][ T5870] ? radix_tree_lookup+0xf9/0x150 [ 138.972973][ T5870] mem_cgroup_swapin_charge_folio+0x107/0x1a0 [ 138.979040][ T5870] __read_swap_cache_async+0x2b9/0x520 [ 138.984530][ T5870] swap_cluster_readahead+0x380/0x3f0 [ 138.989957][ T5870] swapin_readahead+0xe2/0x7a0 [ 138.994751][ T5870] ? __filemap_get_folio+0x420/0x5b0 [ 139.000125][ T5870] ? swap_cache_get_folio+0x6e/0x210 [ 139.005416][ T5870] do_swap_page+0x3bc/0x1840 [ 139.010038][ T5870] ? exc_page_fault+0x32e/0x650 [ 139.014889][ T5870] ? __rcu_read_lock+0x36/0x50 [ 139.019772][ T5870] handle_mm_fault+0x809/0x2a80 [ 139.024631][ T5870] ? mas_walk+0x204/0x320 [ 139.028979][ T5870] exc_page_fault+0x3b9/0x650 [ 139.033739][ T5870] asm_exc_page_fault+0x26/0x30 [ 139.038626][ T5870] RIP: 0033:0x7f97bb8f52f5 [ 139.043089][ T5870] Code: 00 00 0f 1f 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 0e fc 0d 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 139.062750][ T5870] RSP: 002b:00007fffd0201088 EFLAGS: 00010246 [ 139.068903][ T5870] RAX: 0000000000000000 RBX: 00000000000001fa RCX: 00007f97bb8f52f3 [ 139.076928][ T5870] RDX: 00007fffd02010a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 139.084904][ T5870] RBP: 00007fffd020111c R08: 000000003265d1ed R09: 7fffffffffffffff [ 139.092883][ T5870] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 139.100862][ T5870] R13: 0000000000021c4c R14: 0000000000021bb1 R15: 0000000000000009 [ 139.108966][ T5870] [ 139.112249][ T5870] memory: usage 307200kB, limit 307200kB, failcnt 606 [ 139.119363][ T5870] memory+swap: usage 307672kB, limit 9007199254740988kB, failcnt 0 [ 139.127369][ T5870] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 139.134647][ T5870] Memory cgroup stats for /syz4: [ 139.134868][ T5870] cache 12288 [ 139.143184][ T5870] rss 0 [ 139.146014][ T5870] shmem 0 [ 139.148969][ T5870] mapped_file 0 [ 139.152417][ T5870] dirty 12288 [ 139.155818][ T5870] writeback 0 [ 139.159157][ T5870] workingset_refault_anon 411 [ 139.163830][ T5870] workingset_refault_file 27 [ 139.168446][ T5870] swap 483328 [ 139.171771][ T5870] swapcached 0 [ 139.175159][ T5870] pgpgin 192485 [ 139.178617][ T5870] pgpgout 192482 [ 139.182147][ T5870] pgfault 206367 [ 139.186008][ T5870] pgmajfault 177 [ 139.189550][ T5870] inactive_anon 0 [ 139.193227][ T5870] active_anon 0 [ 139.196835][ T5870] inactive_file 12288 [ 139.200812][ T5870] active_file 0 [ 139.204277][ T5870] unevictable 0 [ 139.207735][ T5870] hierarchical_memory_limit 314572800 [ 139.213100][ T5870] hierarchical_memsw_limit 9223372036854771712 [ 139.219287][ T5870] total_cache 12288 [ 139.223172][ T5870] total_rss 0 [ 139.226467][ T5870] total_shmem 0 [ 139.229912][ T5870] total_mapped_file 0 [ 139.233897][ T5870] total_dirty 12288 [ 139.237716][ T5870] total_writeback 0 [ 139.241527][ T5870] total_workingset_refault_anon 411 [ 139.246738][ T5870] total_workingset_refault_file 27 [ 139.251837][ T5870] total_swap 483328 [ 139.255747][ T5870] total_swapcached 0 [ 139.259707][ T5870] total_pgpgin 192485 [ 139.263685][ T5870] total_pgpgout 192482 [ 139.267773][ T5870] total_pgfault 206367 [ 139.271886][ T5870] total_pgmajfault 177 [ 139.275987][ T5870] total_inactive_anon 0 [ 139.280128][ T5870] total_active_anon 0 [ 139.284101][ T5870] total_inactive_file 12288 [ 139.288633][ T5870] total_active_file 0 [ 139.292616][ T5870] total_unevictable 0 [ 139.296671][ T5870] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=8679,uid=0 [ 139.312369][ T5870] Memory cgroup out of memory: Killed process 8679 (syz-executor.4) total-vm:46572kB, anon-rss:548kB, file-rss:8892kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 139.396652][ T29] audit: type=1400 audit(1718894482.681:64688): avc: denied { setopt } for pid=8702 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 139.468561][ T8709] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 139.484181][ T29] audit: type=1400 audit(1718894482.761:64689): avc: denied { getopt } for pid=8708 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 139.594834][ T8725] loop1: detected capacity change from 0 to 164 [ 139.607155][ T29] audit: type=1400 audit(1718894482.891:64690): avc: denied { connect } for pid=8724 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 139.687478][ T8732] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 139.787211][ T8736] loop2: detected capacity change from 0 to 256 [ 139.795152][ T8736] FAT-fs (loop2): bogus number of FAT structure [ 139.801505][ T8736] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 139.810740][ T8736] FAT-fs (loop2): Can't find a valid FAT filesystem [ 139.908334][ T8744] loop1: detected capacity change from 0 to 2048 [ 139.915059][ T29] audit: type=1326 audit(1718894483.191:64691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8735 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ab019f29 code=0x7ffc0000 [ 139.939174][ T29] audit: type=1326 audit(1718894483.191:64692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8735 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ab019f29 code=0x7ffc0000 [ 139.940427][ T8744] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 139.972971][ T8744] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 139.983885][ T8744] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 1)! [ 139.994033][ T8744] EXT4-fs (loop1): group descriptors corrupted! [ 140.050937][ T8744] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 140.114749][ T29] audit: type=1400 audit(1718894483.391:64693): avc: denied { read } for pid=8743 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 140.371838][ T8748] loop0: detected capacity change from 0 to 128 [ 140.607596][ T8759] usb usb9: usbfs: process 8759 (syz-executor.0) did not claim interface 0 before use [ 140.620548][ T8759] usb usb9: selecting invalid altsetting 21783 [ 140.659015][ T8765] loop0: detected capacity change from 0 to 128 [ 140.666959][ T8765] FAT-fs (loop0): Directory bread(block 11554) failed [ 140.673843][ T8765] FAT-fs (loop0): Directory bread(block 11555) failed [ 140.680943][ T8765] FAT-fs (loop0): Directory bread(block 11556) failed [ 140.688719][ T8765] FAT-fs (loop0): Directory bread(block 11557) failed [ 140.695875][ T8765] FAT-fs (loop0): Directory bread(block 11558) failed [ 140.699416][ T8767] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 140.712021][ T8765] FAT-fs (loop0): Directory bread(block 11559) failed [ 140.712106][ T8765] FAT-fs (loop0): Directory bread(block 11560) failed [ 140.712145][ T8765] FAT-fs (loop0): Directory bread(block 11561) failed [ 140.735693][ T8765] FAT-fs (loop0): Directory bread(block 11562) failed [ 140.742832][ T8765] FAT-fs (loop0): Directory bread(block 11563) failed [ 140.877257][ T8779] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 140.877820][ T8769] loop2: detected capacity change from 0 to 8192 [ 140.966259][ T8786] siw: device registration error -23 [ 141.914636][ T8886] loop4: detected capacity change from 0 to 1024 [ 141.922069][ T8883] netlink: 'syz-executor.2': attribute type 322 has an invalid length. [ 141.931878][ T8886] EXT4-fs: Ignoring removed orlov option [ 141.951020][ T8886] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 141.965759][ T8886] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 141.976762][ T8886] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 141.995942][ T8898] sctp: [Deprecated]: syz-executor.0 (pid 8898) Use of struct sctp_assoc_value in delayed_ack socket option. [ 141.995942][ T8898] Use struct sctp_sack_info instead [ 142.012769][ T8886] EXT4-fs (loop4): invalid journal inode [ 142.018477][ T8886] EXT4-fs (loop4): can't get journal size [ 142.024899][ T8898] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 142.036172][ T8886] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 142.114535][ T8905] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 142.126587][ T5870] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.213920][ T8911] loop0: detected capacity change from 0 to 1024 [ 142.222158][ T8911] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (34587!=20869) [ 142.231897][ T8911] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 142.243287][ T8911] JBD2: no valid journal superblock found [ 142.249072][ T8911] EXT4-fs (loop0): Could not load journal inode [ 142.290308][ T8913] loop2: detected capacity change from 0 to 512 [ 142.330724][ T8913] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.343407][ T8913] ext4 filesystem being mounted at /root/syzkaller-testdir2769535030/syzkaller.ORnNRG/22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 142.424023][ T8414] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.490633][ T8920] siw: device registration error -23 [ 143.014426][ T8924] loop2: detected capacity change from 0 to 128 [ 143.023560][ T8924] FAT-fs (loop2): Directory bread(block 11554) failed [ 143.032196][ T8924] FAT-fs (loop2): Directory bread(block 11555) failed [ 143.039106][ T8924] FAT-fs (loop2): Directory bread(block 11556) failed [ 143.047166][ T8924] FAT-fs (loop2): Directory bread(block 11557) failed [ 143.054014][ T8924] FAT-fs (loop2): Directory bread(block 11558) failed [ 143.061141][ T8924] FAT-fs (loop2): Directory bread(block 11559) failed [ 143.068919][ T8924] FAT-fs (loop2): Directory bread(block 11560) failed [ 143.075828][ T8924] FAT-fs (loop2): Directory bread(block 11561) failed [ 143.082761][ T8924] FAT-fs (loop2): Directory bread(block 11562) failed [ 143.090620][ T8924] FAT-fs (loop2): Directory bread(block 11563) failed [ 143.240666][ T8932] siw: device registration error -23 [ 143.282169][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 143.282187][ T29] audit: type=1400 audit(1718894486.561:64696): avc: denied { create } for pid=8934 comm="syz-executor.4" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 143.383353][ T8931] netlink: 'syz-executor.2': attribute type 322 has an invalid length. [ 143.393139][ T29] audit: type=1400 audit(1718894486.601:64697): avc: denied { write } for pid=8934 comm="syz-executor.4" name="file0" dev="tmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 143.415795][ T29] audit: type=1400 audit(1718894486.601:64698): avc: denied { open } for pid=8934 comm="syz-executor.4" path="/root/syzkaller-testdir143699185/syzkaller.Z5NMFp/186/file1/file0" dev="tmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 143.516988][ T8940] loop4: detected capacity change from 0 to 512 [ 143.599006][ T8940] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor.4: invalid indirect mapped block 256 (level 1) [ 143.646614][ T8940] EXT4-fs (loop4): Remounting filesystem read-only [ 143.653299][ T8946] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 143.663218][ T29] audit: type=1400 audit(1718894486.821:64699): avc: denied { mounton } for pid=8934 comm="syz-executor.4" path="/root/syzkaller-testdir143699185/syzkaller.Z5NMFp/186/file1/file0" dev="tmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 143.693935][ T8940] EXT4-fs (loop4): 1 truncate cleaned up [ 143.701958][ T8940] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.726465][ T8946] bond1: entered promiscuous mode [ 143.731855][ T8940] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 143.739966][ T8947] lo: entered promiscuous mode [ 143.754190][ T8940] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.763581][ T8947] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 143.778585][ T8947] bond1: (slave lo): Enslaving as an active interface with an up link [ 143.804459][ T29] audit: type=1400 audit(1718894487.081:64700): avc: denied { sys_module } for pid=8949 comm="syz-executor.2" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 143.990840][ T8963] loop0: detected capacity change from 0 to 256 [ 143.998303][ T8965] loop1: detected capacity change from 0 to 128 [ 144.006738][ T29] audit: type=1400 audit(1718894487.291:64701): avc: denied { mounton } for pid=8960 comm="syz-executor.0" path="/root/syzkaller-testdir87049845/syzkaller.nnWtay/37/bus" dev="sda1" ino=1969 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=file permissive=1 [ 144.040938][ T8963] FAT-fs (loop0): Directory bread(block 64) failed [ 144.047755][ T8963] FAT-fs (loop0): Directory bread(block 65) failed [ 144.054291][ T8963] FAT-fs (loop0): Directory bread(block 66) failed [ 144.062041][ T8965] FAT-fs (loop1): Directory bread(block 11554) failed [ 144.062367][ T8963] FAT-fs (loop0): Directory bread(block 67) failed [ 144.077667][ T8965] FAT-fs (loop1): Directory bread(block 11555) failed [ 144.077781][ T8963] FAT-fs (loop0): Directory bread(block 68) failed [ 144.084547][ T8965] FAT-fs (loop1): Directory bread(block 11556) failed [ 144.091268][ T8963] FAT-fs (loop0): Directory bread(block 69) failed [ 144.105536][ T8963] FAT-fs (loop0): Directory bread(block 70) failed [ 144.112917][ T8963] FAT-fs (loop0): Directory bread(block 71) failed [ 144.120659][ T8963] FAT-fs (loop0): Directory bread(block 72) failed [ 144.120878][ T8965] FAT-fs (loop1): Directory bread(block 11557) failed [ 144.127298][ T8963] FAT-fs (loop0): Directory bread(block 73) failed [ 144.142901][ T8965] FAT-fs (loop1): Directory bread(block 11558) failed [ 144.149826][ T8965] FAT-fs (loop1): Directory bread(block 11559) failed [ 144.156667][ T8965] FAT-fs (loop1): Directory bread(block 11560) failed [ 144.163654][ T8965] FAT-fs (loop1): Directory bread(block 11561) failed [ 144.176330][ T29] audit: type=1400 audit(1718894487.461:64702): avc: denied { getopt } for pid=8961 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 144.205918][ T8965] FAT-fs (loop1): Directory bread(block 11562) failed [ 144.217559][ T8965] FAT-fs (loop1): Directory bread(block 11563) failed [ 144.405783][ T8973] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 144.417561][ T8975] loop1: detected capacity change from 0 to 128 [ 144.474551][ T8978] siw: device registration error -23 [ 144.526895][ T8975] FAT-fs (loop1): Directory bread(block 160) failed [ 144.533671][ T8975] FAT-fs (loop1): Directory bread(block 161) failed [ 144.604807][ T8975] FAT-fs (loop1): Directory bread(block 162) failed [ 144.615499][ T6892] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.743181][ T8975] FAT-fs (loop1): Directory bread(block 163) failed [ 144.750592][ T8975] FAT-fs (loop1): Directory bread(block 164) failed [ 144.757226][ T8975] FAT-fs (loop1): Directory bread(block 165) failed [ 144.763853][ T8975] FAT-fs (loop1): Directory bread(block 166) failed [ 144.770610][ T8975] FAT-fs (loop1): Directory bread(block 167) failed [ 144.780718][ T8975] FAT-fs (loop1): Directory bread(block 160) failed [ 144.800329][ T8975] FAT-fs (loop1): Directory bread(block 161) failed [ 144.805548][ T8988] IPVS: set_ctl: invalid protocol: 166 172.30.1.5:20004 [ 144.818820][ T6892] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.834942][ T8975] 8021q: VLANs not supported on ipvlan0 [ 144.870509][ T6892] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.910108][ T8999] xt_CT: You must specify a L4 protocol and not use inversions on it [ 144.922516][ T6892] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.941031][ T9001] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 144.961478][ T9001] xt_nat: multiple ranges no longer supported [ 144.996702][ T6892] bridge_slave_1: left allmulticast mode [ 145.002380][ T6892] bridge_slave_1: left promiscuous mode [ 145.008076][ T6892] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.036953][ T6892] bridge_slave_0: left allmulticast mode [ 145.042625][ T6892] bridge_slave_0: left promiscuous mode [ 145.043933][ T9003] loop2: detected capacity change from 0 to 128 [ 145.048352][ T6892] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.258977][ T6892] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.270941][ T6892] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.281363][ T6892] bond0 (unregistering): Released all slaves [ 145.293081][ T6892] bond1 (unregistering): Released all slaves [ 145.302280][ T6892] bond2 (unregistering): Released all slaves [ 145.323990][ T9010] smc: net device wg0 applied user defined pnetid SYZ0 [ 145.381696][ T8987] chnl_net:caif_netlink_parms(): no params data found [ 145.450497][ T9020] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 145.485096][ T9016] xt_recent: hitcount (512) is larger than allowed maximum (255) [ 145.504381][ T8987] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.511617][ T8987] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.521520][ T8987] bridge_slave_0: entered allmulticast mode [ 145.528322][ T8987] bridge_slave_0: entered promiscuous mode [ 145.536904][ T9029] lo: entered promiscuous mode [ 145.553945][ T6892] hsr_slave_0: left promiscuous mode [ 145.570157][ T6892] hsr_slave_1: left promiscuous mode [ 145.573647][ T9032] loop1: detected capacity change from 0 to 8192 [ 145.586020][ T6892] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.593487][ T6892] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.604551][ T6892] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.612253][ T6892] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.622922][ T6892] veth1_macvtap: left promiscuous mode [ 145.628577][ T6892] veth0_macvtap: left promiscuous mode [ 145.634103][ T6892] veth1_vlan: left promiscuous mode [ 145.639621][ T6892] veth0_vlan: left promiscuous mode [ 145.736280][ T6892] team0 (unregistering): Port device team_slave_1 removed [ 145.747503][ T6892] team0 (unregistering): Port device team_slave_0 removed [ 145.788905][ T8987] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.796084][ T8987] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.803897][ T8987] bridge_slave_1: entered allmulticast mode [ 145.810458][ T8987] bridge_slave_1: entered promiscuous mode [ 145.816786][ T9036] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 145.849561][ T8987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.860944][ T8987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.897278][ T8987] team0: Port device team_slave_0 added [ 145.909742][ T8987] team0: Port device team_slave_1 added [ 145.944846][ T9057] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 145.960485][ T8987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.967485][ T8987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.993478][ T8987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.009475][ T3178] hid-generic 0000:C9C2:0000.0003: unknown main item tag 0x0 [ 146.016968][ T3178] hid-generic 0000:C9C2:0000.0003: unknown main item tag 0x0 [ 146.024404][ T3178] hid-generic 0000:C9C2:0000.0003: unknown main item tag 0x0 [ 146.029897][ T8987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.031887][ T3178] hid-generic 0000:C9C2:0000.0003: unknown main item tag 0x0 [ 146.038741][ T8987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.046231][ T3178] hid-generic 0000:C9C2:0000.0003: unknown main item tag 0x0 [ 146.072080][ T8987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.079479][ T3178] hid-generic 0000:C9C2:0000.0003: unknown main item tag 0x0 [ 146.097589][ T3178] hid-generic 0000:C9C2:0000.0003: unknown main item tag 0x0 [ 146.105008][ T3178] hid-generic 0000:C9C2:0000.0003: unknown main item tag 0x0 [ 146.112508][ T3178] hid-generic 0000:C9C2:0000.0003: unknown main item tag 0x0 [ 146.119943][ T3178] hid-generic 0000:C9C2:0000.0003: unknown main item tag 0x0 [ 146.127437][ T3178] hid-generic 0000:C9C2:0000.0003: unknown main item tag 0x0 [ 146.134981][ T3178] hid-generic 0000:C9C2:0000.0003: unknown main item tag 0x0 [ 146.142412][ T3178] hid-generic 0000:C9C2:0000.0003: unknown main item tag 0x0 [ 146.149875][ T3178] hid-generic 0000:C9C2:0000.0003: unknown main item tag 0x0 [ 146.157345][ T3178] hid-generic 0000:C9C2:0000.0003: unknown main item tag 0x0 [ 146.164786][ T3178] hid-generic 0000:C9C2:0000.0003: unknown main item tag 0x0 [ 146.172192][ T3178] hid-generic 0000:C9C2:0000.0003: unknown main item tag 0x0 [ 146.179673][ T3178] hid-generic 0000:C9C2:0000.0003: unknown main item tag 0x0 [ 146.187106][ T3178] hid-generic 0000:C9C2:0000.0003: unknown main item tag 0x0 [ 146.190350][ T9062] loop0: detected capacity change from 0 to 128 [ 146.194486][ T3178] hid-generic 0000:C9C2:0000.0003: unknown main item tag 0x0 [ 146.208147][ T3178] hid-generic 0000:C9C2:0000.0003: unknown main item tag 0x0 [ 146.215639][ T3178] hid-generic 0000:C9C2:0000.0003: unknown main item tag 0x0 [ 146.223155][ T3178] hid-generic 0000:C9C2:0000.0003: unknown main item tag 0x0 [ 146.230742][ T3178] hid-generic 0000:C9C2:0000.0003: unknown main item tag 0x0 [ 146.238227][ T3178] hid-generic 0000:C9C2:0000.0003: unknown main item tag 0x0 [ 146.245644][ T3178] hid-generic 0000:C9C2:0000.0003: unknown main item tag 0x0 [ 146.253014][ T3178] hid-generic 0000:C9C2:0000.0003: unknown main item tag 0x0 [ 146.260435][ T3178] hid-generic 0000:C9C2:0000.0003: unknown main item tag 0x0 [ 146.267888][ T3178] hid-generic 0000:C9C2:0000.0003: unknown main item tag 0x0 [ 146.275274][ T3178] hid-generic 0000:C9C2:0000.0003: unknown main item tag 0x0 [ 146.282741][ T3178] hid-generic 0000:C9C2:0000.0003: unknown main item tag 0x0 [ 146.290140][ T3178] hid-generic 0000:C9C2:0000.0003: unknown main item tag 0x0 [ 146.297585][ T3178] hid-generic 0000:C9C2:0000.0003: unknown main item tag 0x0 [ 146.304952][ T3178] hid-generic 0000:C9C2:0000.0003: unknown main item tag 0x0 [ 146.312331][ T3178] hid-generic 0000:C9C2:0000.0003: unknown main item tag 0x0 [ 146.319942][ T3178] hid-generic 0000:C9C2:0000.0003: unknown main item tag 0x0 [ 146.327341][ T3178] hid-generic 0000:C9C2:0000.0003: unknown main item tag 0x0 [ 146.334717][ T3178] hid-generic 0000:C9C2:0000.0003: unknown main item tag 0x0 [ 146.344432][ T3178] hid-generic 0000:C9C2:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 146.459027][ T8987] hsr_slave_0: entered promiscuous mode [ 146.465982][ T8987] hsr_slave_1: entered promiscuous mode [ 146.477762][ T8987] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.490823][ T8987] Cannot create hsr debugfs directory [ 146.496469][ T9086] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 146.870934][ T29] audit: type=1400 audit(1718894490.151:64703): avc: denied { ioctl } for pid=9100 comm="syz-executor.2" path="socket:[29305]" dev="sockfs" ino=29305 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 146.896716][ T29] audit: type=1400 audit(1718894490.151:64704): avc: denied { mount } for pid=9104 comm="syz-executor.0" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 147.024624][ T9116] cgroup: Bad value for 'name' [ 147.032842][ T9116] SELinux: Context system_u:object_r:systemd_passwd_agent_exec_t:s0 is not valid (left unmapped). [ 147.052210][ T9116] loop0: detected capacity change from 0 to 512 [ 147.063354][ T9116] EXT4-fs (loop0): blocks per group (71) and clusters per group (32768) inconsistent [ 147.093102][ T9113] loop2: detected capacity change from 0 to 8192 [ 147.113550][ T29] audit: type=1400 audit(1718894490.321:64705): avc: denied { relabelto } for pid=9104 comm="syz-executor.0" name="bus" dev="sda1" ino=1963 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 147.248625][ T8987] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 147.326334][ T8987] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 147.396164][ T8987] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 147.405601][ T8987] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 147.474232][ T8987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.500531][ T8987] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.512404][ T3183] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.519514][ T3183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.544490][ T8987] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 147.554908][ T8987] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 147.573377][ T3183] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.580482][ T3183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.618276][ T8987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.654336][ T8987] veth0_vlan: entered promiscuous mode [ 147.663485][ T8987] veth1_vlan: entered promiscuous mode [ 147.683743][ T8987] veth0_macvtap: entered promiscuous mode [ 147.691913][ T8987] veth1_macvtap: entered promiscuous mode [ 147.701940][ T9149] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 147.712764][ T8987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.723289][ T8987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.733177][ T8987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.744499][ T8987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.754681][ T8987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.765153][ T8987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.774990][ T8987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.785514][ T8987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.787825][ T9151] EXT4-fs warning (device sda1): __ext4_ioctl:1258: Setting inode version is not supported with metadata_csum enabled. [ 147.798645][ T8987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.825093][ T8987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.835669][ T8987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.845541][ T8987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.856119][ T8987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.866055][ T8987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.876518][ T8987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.886369][ T8987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.896864][ T8987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.909484][ T8987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.911336][ T9155] loop4: detected capacity change from 0 to 128 [ 147.918391][ T8987] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.931874][ T8987] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.940664][ T8987] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.949401][ T8987] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.030262][ T9168] tmpfs: Bad value for 'nr_blocks' [ 148.063998][ T9170] loop0: detected capacity change from 0 to 2048 [ 148.071483][ T9168] wg0 speed is unknown, defaulting to 1000 [ 148.077539][ T9168] wg0 speed is unknown, defaulting to 1000 [ 148.083626][ T9168] wg0 speed is unknown, defaulting to 1000 [ 148.090589][ T9168] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 148.100777][ T9168] wg0 speed is unknown, defaulting to 1000 [ 148.106969][ T9168] wg0 speed is unknown, defaulting to 1000 [ 148.114828][ T9168] wg0 speed is unknown, defaulting to 1000 [ 148.121115][ T9168] wg0 speed is unknown, defaulting to 1000 [ 148.129227][ T9168] wg0 speed is unknown, defaulting to 1000 [ 148.202816][ T9181] xt_recent: hitcount (512) is larger than allowed maximum (255) [ 148.239746][ T9180] wg0 speed is unknown, defaulting to 1000 [ 148.289778][ T9186] loop3: detected capacity change from 0 to 512 [ 148.298732][ T9186] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 148.310321][ T9186] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 148.325111][ T9186] EXT4-fs (loop3): Remounting filesystem read-only [ 148.332759][ T9186] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2856: Unable to expand inode 17. Delete some EAs or run e2fsck. [ 148.345787][ T9186] EXT4-fs warning (device loop3): ext4_evict_inode:254: couldn't mark inode dirty (err -5) [ 148.360925][ T9186] EXT4-fs (loop3): 1 orphan inode deleted [ 148.367095][ T9186] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.380747][ T9186] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 148.402444][ T9186] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.480237][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 148.480279][ T29] audit: type=1326 audit(1718894491.761:64709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9184 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3de2e0ef29 code=0x7ffc0000 [ 148.511857][ T9198] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 148.523860][ T9198] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 148.535831][ T9198] bridge_slave_0: default FDB implementation only supports local addresses [ 148.544424][ T29] audit: type=1326 audit(1718894491.761:64710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9184 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3de2e0ef29 code=0x7ffc0000 [ 148.568752][ T29] audit: type=1326 audit(1718894491.761:64711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9184 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3de2e0ef29 code=0x7ffc0000 [ 148.592768][ T29] audit: type=1326 audit(1718894491.761:64712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9184 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3de2e0ef29 code=0x7ffc0000 [ 148.616871][ T29] audit: type=1326 audit(1718894491.771:64713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9184 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3de2e0ef29 code=0x7ffc0000 [ 148.640941][ T29] audit: type=1326 audit(1718894491.771:64714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9184 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3de2e0ef29 code=0x7ffc0000 [ 148.664975][ T29] audit: type=1326 audit(1718894491.771:64715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9184 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f3de2e0ef29 code=0x7ffc0000 [ 148.688996][ T29] audit: type=1326 audit(1718894491.771:64716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9184 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3de2e0ef29 code=0x7ffc0000 [ 148.713100][ T29] audit: type=1326 audit(1718894491.771:64717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9184 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3de2e0ef29 code=0x7ffc0000 [ 148.737170][ T29] audit: type=1326 audit(1718894491.771:64718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9184 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3de2e0db20 code=0x7ffc0000 [ 148.751011][ T9185] loop0: detected capacity change from 0 to 65536 [ 148.852953][ T9217] loop1: detected capacity change from 0 to 128 [ 148.951917][ T9180] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 149.037590][ T9226] loop3: detected capacity change from 0 to 8192 [ 149.058640][ T9226] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 149.141794][ T9234] loop0: detected capacity change from 0 to 512 [ 149.151066][ T9234] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 149.162431][ T9234] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 149.184696][ T9234] EXT4-fs (loop0): Remounting filesystem read-only [ 149.192899][ T9234] EXT4-fs warning (device loop0): ext4_evict_inode:254: couldn't mark inode dirty (err -5) [ 149.203081][ T9234] EXT4-fs (loop0): 1 orphan inode deleted [ 149.209363][ T9234] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.221733][ T9234] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 149.232191][ T9234] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.249014][ T9244] bridge0: left promiscuous mode [ 149.254306][ T9244] bridge_slave_1: left allmulticast mode [ 149.260004][ T9244] bridge_slave_1: left promiscuous mode [ 149.265733][ T9244] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.273634][ T9244] bridge_slave_0: left allmulticast mode [ 149.279374][ T9244] bridge_slave_0: left promiscuous mode [ 149.285157][ T9244] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.312228][ T9247] loop4: detected capacity change from 0 to 512 [ 149.328133][ T9247] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.341566][ T9247] ext4 filesystem being mounted at /root/syzkaller-testdir143699185/syzkaller.Z5NMFp/211/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.403605][ T5870] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.488879][ T9261] loop4: detected capacity change from 0 to 2048 [ 149.515595][ T9261] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 149.538190][ T9264] loop0: detected capacity change from 0 to 128 [ 149.574780][ T9267] loop2: detected capacity change from 0 to 2048 [ 149.613416][ T9268] ================================================================== [ 149.621530][ T9268] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 149.629546][ T9268] [ 149.631860][ T9268] write to 0xffff88810670821c of 4 bytes by task 9264 on cpu 0: [ 149.639482][ T9268] xas_set_mark+0x131/0x150 [ 149.643991][ T9268] __folio_start_writeback+0x1f1/0x450 [ 149.649459][ T9268] __block_write_full_folio+0x506/0x8d0 [ 149.655015][ T9268] block_write_full_folio+0x293/0x2b0 [ 149.660408][ T9268] __mpage_writepage+0xcfe/0xe10 [ 149.665362][ T9268] write_cache_pages+0x62/0x100 [ 149.670235][ T9268] mpage_writepages+0x72/0xf0 [ 149.674918][ T9268] fat_writepages+0x24/0x30 [ 149.679438][ T9268] do_writepages+0x1d8/0x480 [ 149.684042][ T9268] filemap_fdatawrite_wbc+0xdb/0x100 [ 149.689360][ T9268] file_write_and_wait_range+0xc8/0x170 [ 149.694914][ T9268] __generic_file_fsync+0x4c/0x140 [ 149.700029][ T9268] fat_file_fsync+0x4c/0x100 [ 149.704630][ T9268] vfs_fsync_range+0x122/0x140 [ 149.709401][ T9268] generic_file_write_iter+0x191/0x1d0 [ 149.714886][ T9268] iter_file_splice_write+0x5e6/0x970 [ 149.720376][ T9268] direct_splice_actor+0x16c/0x2c0 [ 149.725541][ T9268] splice_direct_to_actor+0x305/0x670 [ 149.730935][ T9268] do_splice_direct+0xd7/0x150 [ 149.735713][ T9268] do_sendfile+0x3ab/0x960 [ 149.740128][ T9268] __x64_sys_sendfile64+0x110/0x150 [ 149.745341][ T9268] x64_sys_call+0x2c9f/0x2d70 [ 149.750032][ T9268] do_syscall_64+0xc9/0x1c0 [ 149.754548][ T9268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.760452][ T9268] [ 149.762774][ T9268] read to 0xffff88810670821c of 4 bytes by task 9268 on cpu 1: [ 149.770317][ T9268] __writeback_single_inode+0x21d/0x870 [ 149.775888][ T9268] writeback_single_inode+0x12f/0x4a0 [ 149.781369][ T9268] sync_inode_metadata+0x5c/0x90 [ 149.786322][ T9268] __generic_file_fsync+0xf9/0x140 [ 149.791439][ T9268] fat_file_fsync+0x4c/0x100 [ 149.796057][ T9268] vfs_fsync_range+0x122/0x140 [ 149.800826][ T9268] generic_file_write_iter+0x191/0x1d0 [ 149.806302][ T9268] iter_file_splice_write+0x5e6/0x970 [ 149.811691][ T9268] direct_splice_actor+0x16c/0x2c0 [ 149.816821][ T9268] splice_direct_to_actor+0x305/0x670 [ 149.822209][ T9268] do_splice_direct+0xd7/0x150 [ 149.826989][ T9268] do_sendfile+0x3ab/0x960 [ 149.831406][ T9268] __x64_sys_sendfile64+0x110/0x150 [ 149.836625][ T9268] x64_sys_call+0x2c9f/0x2d70 [ 149.841317][ T9268] do_syscall_64+0xc9/0x1c0 [ 149.845832][ T9268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.851734][ T9268] [ 149.854052][ T9268] value changed: 0x0a000021 -> 0x04000021 [ 149.859771][ T9268] 2024/06/20 14:41:33 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 149.862091][ T9268] Reported by Kernel Concurrency Sanitizer on: [ 149.868257][ T9268] CPU: 1 PID: 9268 Comm: syz-executor.0 Not tainted 6.10.0-rc4-syzkaller-00052-ge5b3efbe1ab1 #0 [ 149.878671][ T9268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 149.888731][ T9268] ==================================================================